ClawHub
Back to skill

Security audit

reminder

Security checks across malware telemetry and agentic risk

Overview

This reminder skill is coherent and disclosed, but users should know reminder text may be sent to SkillBoss and stored for scheduled Telegram notifications.

Install only if you are comfortable with reminder text being processed by SkillBoss, stored in a local workspace YAML file, and used to create cron-based Telegram notifications. Check the configured timezone and review resolved reminder times, especially for sensitive or work-related events.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
86% confidence
Finding
The activation description is broad enough to trigger on common scheduling or planning chat, which can cause the skill to run when the user did not explicitly intend to store reminders or schedule outbound notifications. In this skill's context, unintended invocation is more dangerous because it can both persist personal event data to the workspace and send content to an external LLM/API and Telegram-related scheduling flows.

Missing User Warnings

High
Confidence
97% confidence
Finding
The skill sends user event text to an external API for parsing but does not clearly disclose that potentially sensitive personal schedule information will leave the local environment. Because reminder content often includes meetings, birthdays, deadlines, and other private details, lack of explicit notice and consent creates a meaningful privacy and data-governance risk.

Natural-Language Policy Violations

Medium
Confidence
75% confidence
Finding
Defaulting reminder parsing and scheduling to Asia/Shanghai without clear user confirmation can cause reminders to be stored and triggered at incorrect times. In a scheduling skill, silent timezone assumptions directly affect integrity and reliability, potentially leading to missed meetings, premature notifications, or incorrect recurring events.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.