Security audit
Security checks for vulnerabilities and agentic risk
This is a local SQLite task manager whose file access, database writes, and delete command match its stated purpose.
Install only if you are comfortable with a local task database being created and modified under your home directory by default. Use NO_NONSENSE_TASKS_DB to point it somewhere else, and be aware that task_delete.sh removes task records rather than archiving them.
Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.
3. Validate inputs
4. Escape SQL strings
5. Handle zero-result cases
6. Update SKILL.md with usage examples
## Known Limitations
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
**Adding a new migration:**
1. Create `migrations/00X_description.sql` (next number in sequence)
2. Write SQL schema changes
3. Run `./scripts/init_db.sh` to apply
4. Migration is tracked in `schema_migrations` table
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
task_add.sh # Create tasks
task_list.sh # List and filter by status
task_show.sh # Show task details
task_move.sh # Change status
This markdown file lists task_delete.sh as an available command, but provides no user warning that it deletes task data and may be destructive. Under the markdown-specific warning criteria, user-facing documentation should disclose behaviors that can affect user data or system integrity.
Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.
task_stats.sh # Show statistics
Run any command with `--help` for usage details.
## Configuration
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
./scripts/task_add.sh "Build task tracker skill" \
--description "Create a SQLite-based task manager" \
--tags "work,urgent" \
--status todo
This markdown file describes a command that deletes tasks, which can affect user data. Under the markdown-specific warning criteria, the description should disclose destructive behavior, but this section presents the command without any caution, confirmation note, or recovery limitation.
The architecture section says the database path can be overridden with NO_NONSENSE_DB, but the environment variables section later documents NO_NONSENSE_TASKS_DB as the database file path variable. These two statements cannot both be correct, so the documentation actively conflicts about how the skill is configured.
This code performs a subprocess-style operation by invoking sqlite3, but the only disclosure is an internal code comment about SQL matching logic. Under the code-file criteria, user-facing disclosure can be a confirmation, visible log, print statement, or documented warning; none is present for the database access itself.
This shell script performs a database write that changes task records, but it provides no confirmation prompt or pre-action disclosure beyond a generic comment and help text. Because file/database writes are safety-relevant operations for code files, the lack of an explicit user-facing warning before execution is a missing disclosure.
No suspicious patterns detected.