ClawHub
Back to skill

Security audit

ia-file-todos

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward markdown-based todo helper whose file operations are disclosed and limited to the declared project todo workflow.

Install this if you want agents to create and maintain markdown todo files in your project. Expect it to add, rename, and update files under todos/; review those changes before committing if your todo files may include sensitive project details.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Unrestricted Tool Access

Medium
Category
Excessive Agency
Content
**Application Todo model:** Database model for user-facing task management. Different from this file-based system.

**TodoWrite tool:** In-memory task tracking during agent sessions. Temporary, not persisted to disk.

## Verify
Confidence
85% confidence
Finding
tool:*

Hidden Instructions

High
Category
Prompt Injection
Content
Out of scope:
- Acting as the runtime instructions themselves (those live in `SKILL.md`).
- Trigger phrasings already covered by adjacent `ia-*` skills (`validate-plugin` flags >70% description overlap as DUPLICATE_TRIGGER).
- <!-- to fill in: domain-specific exclusions when the skill drifts -->

## Trigger Context
Confidence
70% confidence
Finding
<!-- to fill in: domain-specific exclusions when the skill drifts --> ## Trigger Context - Class: `tool` - Hook regex: `plugins/whetstone/hooks/skill-patterns.sh` -> `SKILL_PATTERNS[ia-file-todos]`

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.