Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed SpeakNotes API integration that uses a user-provided API key to create, upload, poll, and retrieve notes and folders.
Install this only if you are comfortable giving OpenClaw a SpeakNotes API key that can create uploads and read notes and folders available to that key. Use a scoped or revocable API key if SpeakNotes supports it, and ask the agent to access existing notes or folders only when needed.
The manifest/openAPI context describes broad direct API use without clear trigger constraints, approved use cases, or boundaries on when the agent may call these endpoints. In combination with bearer-authenticated access and overbroad endpoints, the lack of invocation guardrails makes unintended or excessive data access more likely.
The skill description says it is for direct SpeakNotes transcript/summary generation, but the OpenAPI spec also grants broad read access to existing notes and folders. This creates an over-scoped integration that can be used for unrelated account content discovery, increasing the chance of unauthorized data exposure if the agent is invoked in contexts beyond the user's intent.
Exposing list/get operations for notes and folders is not necessary for a skill whose stated purpose is generating transcripts and summaries from supplied inputs. Those endpoints enable inventorying and retrieving potentially sensitive user content, so a compromised or overly-permissive agent could access unrelated account data under the same bearer credential.
No suspicious patterns detected.
