Birdnet

PassAudited by ClawScan on May 1, 2026.

Overview

This skill coherently queries a configured BirdNET-Go API and does not show evidence of hidden, destructive, or unrelated behavior.

Before installing, confirm the BirdNET-Go URL in ~/.clawdbot/credentials/birdnet/config.json points to your own intended instance. The skill appears benign and read-only, but it will let the agent view BirdNET-Go detection information from that service.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

The agent can retrieve and display bird detection records, timestamps, confidence scores, and weather details from the configured BirdNET-Go service.

Why it was flagged

The script reads a user-configured BirdNET-Go URL and uses curl to query detection endpoints. This network access is disclosed and purpose-aligned, but users should verify the configured URL is their intended BirdNET-Go instance.

Skill content

CONFIG_FILE="$HOME/.clawdbot/credentials/birdnet/config.json" ... curl -s "$API/detections?limit=$limit"

Recommendation

Use this skill only with a BirdNET-Go URL you trust, preferably on your local network, and avoid pointing the config at unrelated or public services.