ClawHub
Back to skill

Security audit

Birthday Reminder

Security checks across malware telemetry and agentic risk

Overview

This appears to be a local birthday reminder that stores names and dates on disk, with a documentation mismatch but no hidden network, credential, or destructive behavior.

Before installing, understand that names and birthdays will be stored locally and remain until removed. Treat /home/clawd/clawd/data/birthdays.json as the actual storage file despite the documentation mentioning birthdays.md, and only store birthday data you are comfortable keeping on this machine.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill clearly instructs reading from and writing to a local file, but no permissions are declared. That creates an authorization and transparency gap: the platform or user may not be aware that persistent filesystem access is required, which can lead to unintended data access or storage beyond expected boundaries.

Description-Behavior Mismatch

Medium
Confidence
94% confidence
Finding
The skill metadata says birthday data is stored in /home/clawd/clawd/data/birthdays.md, but this script actually reads /home/clawd/clawd/data/birthdays.json. This inconsistency can cause the reminder job to operate on a different data source than the rest of the skill, leading to silent data loss, missed reminders, or use of stale/unaudited data. In a personal-data skill, storage mismatches are security-relevant because users may believe one file contains the authoritative data while automation reads another.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The activation criteria are broad enough to trigger on ordinary birthday-related conversation, which can cause the agent to read or write personal data when the user did not explicitly intend to invoke persistent storage. In context, this matters because the skill handles sensitive personal information and performs file operations automatically.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill stores names and birthdays in a persistent local file but does not clearly warn users before doing so. Because birthdays are personal data, silent persistence can violate user expectations and create privacy risk if the file is later accessed by other local processes or users.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.