ClawHub
Back to skill

Security audit

Karakeep

Security checks across malware telemetry and agentic risk

Overview

This skill coherently manages Karakeep bookmarks, with the main caution that it stores and uses an API key locally in plaintext.

Install only if you are comfortable giving the skill a Karakeep API key and sending bookmark data to your configured Karakeep instance. Prefer a least-privilege or revocable API key, verify the instance URL before use, and restrict permissions on ~/.config/karakeep/config.json if you use the login command.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill documentation shows capabilities that access environment variables, read and write local configuration files, and make network requests, but it declares no permissions. This creates a transparency and consent problem: users and hosting systems may not realize the skill stores credentials locally and communicates with an external Karakeep instance, increasing the risk of unintended secret exposure or unauthorized data handling.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The setup instructions tell the user to provide an API key and mention config and environment storage, but they do not warn that credentials may be persisted in local configuration or shell environments. This is dangerous because users may unknowingly leave long-lived secrets in plaintext files or inherited environment variables where other local processes, users, backups, or logs could access them.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The login flow persists the API key in plaintext to ~/.config/karakeep/config.json without setting restrictive file permissions or warning the user that long-lived credentials are being stored locally. On multi-user systems, in backup/sync workflows, or where home-directory contents are exposed to other processes, this can lead to credential disclosure and unauthorized access to the user's bookmark service.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.