ClawHub
Back to skill

Security audit

blooming-elf 绽放精灵

Security checks for vulnerabilities and agentic risk

Overview

This is a plant-care reminder skill that stores plant records and reminders in expected places, with no evidence of hidden or harmful behavior.

Install if you want a plant-care helper that keeps durable watering and plant records. Use a dedicated plant-care folder or IMA knowledge base, review what it writes to MEMORY.md and plant logs, and be careful before sharing any document links it returns.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Low
Confidence
80% confidence
Finding
The skill includes logic to retrieve and return document URLs, which can expose direct access links to stored notes. If those links are shareable, guessable, or time-limited but transferable, a user may unknowingly disclose sensitive personal data such as routines, locations, or account-linked knowledge-base content.

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger phrases are broad everyday expressions such as general help or plant-status phrases, increasing the chance of unintended invocation. Accidental activation can lead the skill to read or write `MEMORY.md`, local files, or notes without the user realizing a persistence-capable workflow has started.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs writes to `~/.workbuddy/MEMORY.md` and local `.md` files while emphasizing automatic behavior, but it does not present a clear upfront notice about local persistence, data categories stored, retention, or where files will live. This can cause users to disclose personal details and create durable local records without informed consent.

Static analysis

No suspicious patterns detected.