ClawHub
Back to skill

Security audit

karakeep

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent Karakeep CLI guide that requires a Karakeep API key and can change or delete bookmarks when the user directs it to.

Install only if you intend to let an agent operate your Karakeep account. Prefer environment variables or a secret manager for the API key, avoid passing keys on the command line, and require explicit confirmation before deleting bookmarks or lists.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill documents destructive commands such as deleting bookmarks and lists without any warning to obtain user confirmation, explain consequences, or suggest safer read-only alternatives first. In an agent setting, this increases the chance that an automated assistant may execute irreversible operations on behalf of a user from ambiguous prompts or context mistakes.

Missing User Warnings

Low
Confidence
78% confidence
Finding
The authentication section instructs use of an API key via environment variables and CLI flags but does not warn against exposing secrets in shell history, logs, screenshots, or process listings. In an agent or shared-terminal context, passing credentials on the command line is especially risky because flags may be captured by monitoring tools or persisted in history.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.