Same Idea

Security checks across malware telemetry and agentic risk

Overview

Same Idea appears aligned with its stated purpose, but it will search your local Logseq/Obsidian notes and may surface private note excerpts in the conversation.

This skill looks benign for its stated purpose. Before installing, make sure you are comfortable with it searching your Logseq and Obsidian vaults under the documented iCloud paths, since matching note excerpts may be included in the agent’s response.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI06: Memory and Context Poisoning
Low
What this means

Private notes or quotes from the user’s knowledge base could be shown in the agent conversation when the skill is used.

Why it was flagged

The skill is explicitly designed to retrieve content from personal knowledge-base folders; this is purpose-aligned, but those folders may contain private notes that will be used as context for responses.

Skill content
Search Logseq vault: `~/Library/Mobile Documents/iCloud~com~logseq~logseq/Documents/` ... Search Obsidian vault: `~/Library/Mobile Documents/iCloud~md~obsidian/Documents/`
Recommendation

Install only if you are comfortable with the agent searching these vaults; consider editing the paths or limiting vault contents if you keep sensitive notes there.

#
ASI02: Tool Misuse and Exploitation
Info
What this means

The agent may run local searches over the configured note folders to find matching passages.

Why it was flagged

The skill may rely on local command-line search tools to scan the configured note vaults. This is expected for the search purpose and no unsafe automatic execution or destructive command is shown.

Skill content
Use `grep` or `rg` for keyword matching
Recommendation

Use the skill for deliberate knowledge-base searches, and adjust the documented vault paths if you do not want those folders searched.