ClawHub
Back to skill

Security audit

yapp

Security checks for vulnerabilities and agentic risk

Overview

This skill matches its Yapp voice-journal purpose, but it gives an agent ongoing access to private transcripts and persistent memory storage without clear user controls.

Install only if you want an agent to repeatedly access your Yapp transcripts and remember details from them. Before using it, confirm where the API key is stored, how to pause or disable polling, and how to review or delete transcript-derived memories.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The phrase "check my yapps or similar" creates an overly broad natural-language trigger for fetching recordings from a third-party service. Because this skill polls sensitive voice-journal content and can fetch on demand, ambiguous activation increases the chance of unintended retrieval of private recordings without a clear, explicit user request.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill instructs the agent to "store any facts, preferences, or commitments" extracted from raw voice journals, but it does not warn the user that highly sensitive personal information may be persistently retained. In the context of private journaling, this materially increases privacy risk because intimate thoughts, health details, relationships, routines, and other sensitive data could be stored beyond the user's expectation.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill directs the agent to poll a third-party service "on every heartbeat" for new recordings, but it does not warn the user that continuous background access to their Yapp account will occur. For a voice-journaling integration, ongoing polling can surprise users, expand the surveillance surface, and continuously ingest fresh personal data without sufficiently explicit ongoing consent.

Static analysis

No suspicious patterns detected.