ClawHub
Back to skill

Security audit

twitter-bookmarks-exporter

Security checks across malware telemetry and agentic risk

Overview

This skill locally converts a user-supplied X/Twitter bookmarks export into Markdown files, with no evidence of hidden network access, credential theft, or destructive behavior.

Install only if you are comfortable manually exporting your X/Twitter bookmark responses and storing the resulting Markdown files locally. Treat bookmarks.json and output/bookmarks/ as private data, review where the files are stored or synced, and be aware that very large bookmark collections can create many files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Lp3

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding
Without declared permissions the skill's intent is opaque and cannot be validated.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
This markdown file describes generating Markdown files from a user's entire bookmark collection, including tweet text, authors, dates, stats, URLs, and media links, but it does not explicitly warn that this creates a local dataset containing potentially sensitive saved content. For markdown files, SQP-2 applies when user-impacting data handling behavior is described without a warning about privacy or data exposure implications.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The README explains that the skill converts bookmarks into individual Markdown files and saves them under `output/bookmarks/`, but it does not include an explicit user warning about local data creation from potentially sensitive private bookmark content. For markdown files, the rule requires warnings when behavior could affect user data or privacy, and this export touches both by materializing bookmark contents and metadata into files.

Unbounded Output

Medium
Category
Output Handling
Content
| Type | What it exports |
|------|---|
| **Regular Tweet** | Full text, t.co URLs expanded, engagement stats, media links |
| **Note Tweet** | Complete long-form text (no truncation) |
| **X Article** | Title, preview text, article link |
| **Quoted Tweet** | Original tweet + quoted tweet as blockquote |
Confidence
60% confidence
Finding
no truncation

Unbounded Output

Medium
Category
Output Handling
Content
4. Saves files to `output/bookmarks/` folder, named sequentially like `0001-title.md`.
5. Extracts full content for all tweet types:
   - **Regular tweets** — full text, t.co URLs expanded to real URLs
   - **Note tweets** — complete long-form text (no truncation)
   - **X Articles** — title + preview text + article link
6. Includes quoted tweets as blockquotes, media image/video links, and engagement stats.
Confidence
60% confidence
Finding
no truncation

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.