ClawHub
Back to skill

Security audit

TriliumNext Notes

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently connects an agent to TriliumNext Notes through the OOMOL CLI, with disclosed read, write, and delete capabilities that require user confirmation for state-changing actions.

Install this only if you want an agent to access your connected TriliumNext Notes account. Confirm payloads carefully before writes or deletes, and review the oo CLI installer before running first-time setup commands.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The description instructs the agent to use this skill for ANY TriliumNext Notes request and instead of calling the API directly, which is an overly broad routing trigger. That can cause unintended invocation on loosely related mentions of Trilium and may route sensitive or destructive note operations through this skill without sufficient task-specific narrowing, increasing the chance of accidental data modification or deletion.

Static analysis

No suspicious patterns detected.