ClawHub
Back to skill

Security audit

Vikunja

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Vikunja task-management API skill with disclosed token use and no executable payload or hidden behavior found.

Install this only if you want your agent to manage tasks in Vikunja. Use the least-privileged Vikunja API token available, verify the base URL points to the intended instance, and be explicit when you use multiple task systems so generic requests are not handled by Vikunja unexpectedly.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger phrases are broad enough to match generic task-management requests, which can cause this skill to activate when the user did not explicitly intend to use Vikunja. In a skill that performs authenticated API actions against an external task system, overbroad routing increases the chance of unintended data access or state-changing operations in the user's Vikunja instance.

Static analysis

No suspicious patterns detected.