Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local ebook library tracker whose file writes, deletes, and exports match its stated purpose, with some usability cautions around deletion and overwrite behavior.
Install this if you want a local command-line ebook tracker. Be aware that it writes reading history and notes to ~/.ebook/data.jsonl, delete removes a book and related records, and export can overwrite the path you provide.
The skill advertises and relies on local file read/write capabilities (~/.ebook/data.jsonl and export output paths) but does not declare any explicit tool scope or permission boundaries. That makes the effective access surface ambiguous and can allow an agent/runtime to grant broader filesystem access than users would reasonably expect from the metadata alone.
The delete command removes a book and all related sessions, highlights, and reviews, then immediately overwrites the backing data file. Although the command name suggests deletion, there is no confirmation prompt or inline warning comment/user-facing disclosure near the irreversible cascade delete behavior.
The manifest description says to use the skill when 'cataloging books, logging reading sessions, or organizing digital libraries' without defining narrower trigger phrases or exclusion conditions. In a manifest file, this kind of broad natural-language invocation guidance can match many ordinary user requests and may cause unintended activation.
The export command serializes library, highlight, or review data to a user-specified output path, which can overwrite files via write mode. While export is part of the tool's purpose, the code provides no user-facing warning or confirmation when writing potentially sensitive reading history and notes to disk.
No suspicious patterns detected.
