ClawHub
Back to skill

Security audit

water-reminder

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed hydration reminder skill that uses local reminder state and a session identifier to send recurring messages, with no executable package or hidden behavior found.

Install this only if you want recurring hydration and movement notifications. Review the heartbeat setting and the GMT+8 working-hours window before enabling it, and keep USER.md plus heartbeat-state.json private because they may contain your channel/session identifier.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Low
Confidence
88% confidence
Finding
The skill explicitly relies on reading a user's session/channel ID from USER.md to send proactive reminders, but it does not disclose this data use to the user or require consent. This creates a privacy and transparency issue because the skill accesses an identifier used for outbound messaging, and users may not expect that their stored session metadata will be reused this way.

Natural-Language Policy Violations

Medium
Confidence
81% confidence
Finding
The execution logic hard-codes GMT+8 as the time basis for deciding when to send reminders, without indicating that this timezone is configurable or chosen by the user. That can lead to reminders being sent at unexpected hours for users in other locales, undermining consent and creating nuisance or privacy concerns if messages arrive at inappropriate times.

Natural-Language Policy Violations

Medium
Confidence
84% confidence
Finding
The user-facing notes state that reminders occur only during 8:00-23:00 GMT+8, again imposing a fixed locale-specific schedule without justification or user choice. In a notification skill, schedule assumptions directly affect when messages are pushed, so hard-coded timezone behavior is more problematic than a purely internal formatting choice.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.