ClawHub
Back to skill

Security audit

Knowledge Orchestrator

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed knowledge-management bridge for Zotero, Obsidian, and IMA, with sensitive but expected credential and note access.

Install only if you trust it with your Zotero library metadata, Obsidian notes, and IMA credentials. Prefer the `knowledge ...` commands, confirm before any sync/upload action, use least-privilege API keys where possible, and keep credential files private with restrictive permissions.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The README explicitly instructs users to place API credentials in predictable local filesystem paths and even shows writing a key via shell redirection. While this is not an exploit by itself, it normalizes insecure secret handling, increases the chance of accidental exposure through backups, logs, screenshots, or permissive file permissions, and provides no warning about protecting those credentials.

Static analysis

No suspicious patterns detected.