ClawHub
Back to skill

Security audit

Nex Decision Journal

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a real local decision journal, but it needs review because it stores sensitive decisions persistently and its export option can write or overwrite files outside the intended folder.

Review before installing. Use this only if you are comfortable with a persistent local decision database under ~/.nex-decision-journal and a CLI wrapper under ~/.local/bin. Avoid absolute paths or ../ in --output values, treat exported files as confidential, and require explicit confirmation before logging, editing, reviewing, abandoning, or exporting decisions.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill declares no permissions, but its documented behavior clearly requires shell execution, local file writes, and environment interaction. This mismatch undermines permission transparency and can cause the agent or user to invoke capabilities without an explicit trust decision, especially because the skill stores and exports sensitive personal/business decision data.

Vague Triggers

Medium
Confidence
83% confidence
Finding
The trigger list includes broad phrases such as 'decision', 'deciding', and 'should I', which are common in ordinary conversation and can cause accidental invocation. In this skill, unintended activation is more sensitive than usual because it may lead to persistent local storage of private reasoning, business plans, hiring choices, finances, or exports without the user meaning to use the journal tool.

Missing User Warnings

Low
Confidence
78% confidence
Finding
The skill supports CSV/JSON export of highly sensitive decision data but does not clearly warn users that export writes that data to external files on disk. This increases the chance that confidential business or personal reasoning is copied into less protected locations, shared accidentally, or retained longer than expected.

Missing User Warnings

Medium
Confidence
79% confidence
Finding
The export command writes to a user-provided output path without checking whether the target already exists or warning that it will be created or overwritten. In a local journaling tool containing potentially sensitive decision records, accidental overwrite or unintended placement of exported data can lead to data loss or privacy exposure, even though this is not a remote-code or privilege-escalation issue.

Static analysis

No suspicious patterns detected.