ClawHub
Back to skill

Security audit

Bear Notes.Old

Security checks for vulnerabilities and agentic risk

Overview

This Bear Notes skill is coherent and purpose-aligned, but users should protect the local Bear API token it asks them to store.

Install only if you trust the grizzly CLI and are comfortable letting it access or modify Bear notes. Store the Bear token carefully: avoid putting it in shell history, restrict ~/.config/grizzly and the token file permissions, and rotate or revoke the token if you stop using the skill.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs users to save a Bear API token directly to ~/.config/grizzly/token using echo, which stores the credential in plaintext without any warning about local exposure or file permissions. While this is a local secret rather than a remote code execution issue, plaintext credential storage increases the risk of token theft by other local users, malware, backups, or accidental disclosure.

Static analysis

No suspicious patterns detected.