Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Diary

Diary - command-line tool for everyday use

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 42 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's name/description (digital diary) matches the script's local diary behavior, but SKILL.md advertises features (photo attachments, monthly summaries) and a configurable DIARY_DIR environment variable that the bundled script does not appear to implement. Command lists in SKILL.md (e.g., 'diary run', 'diary list') do not fully align with the script's dispatch table (many different subcommands). These inconsistencies suggest the documentation is out of sync with the code.
!
Instruction Scope
SKILL.md instructs data is stored in ~/.local/share/diary and that DIARY_DIR can change it; the script hardcodes DATA_DIR to "$HOME/.local/share/diary" and does not consult DIARY_DIR. The script otherwise stays within the diary data directory and standard shell utilities (grep, tail, wc, du). It reads/writes only files under the diary directory (no network calls), but the mismatch between instructions and actual runtime behavior is a scope/accuracy issue.
Install Mechanism
There is no install spec; risk is low because this is instruction-only plus a shell script bundled with the skill. Nothing is downloaded from external URLs and no installers run automatically.
Credentials
The skill declares no required environment variables, which matches the script (it uses HOME). SKILL.md's mention of a DIARY_DIR env var is not honored by the script — an inconsistency but not an escalatory request for unrelated credentials or secrets.
Persistence & Privilege
The skill does not request elevated privileges, does not set always:true, and confines activity to the user's home directory. It does write persistent diary logs under ~/.local/share/diary, which is expected for a diary tool.
What to consider before installing
This skill is probably what it says (a local diary) and only writes to ~/.local/share/diary, but the documentation and code are out-of-sync. Before installing or running it: (1) Inspect the full script to ensure you accept its behavior (it writes plaintext logs to your home directory). (2) Be aware SKILL.md's DIARY_DIR setting is not used — the script will use ~/.local/share/diary unless you manually edit it. (3) Do not store sensitive secrets in diary entries because files are plaintext and may be backed up or synced. (4) If you want the documented behavior (configurable DIARY_DIR, advertised features), ask the author for an updated release or patch the script yourself. If you lack the ability to review code, run it in a sandboxed or non-critical account first.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.2
Download zip
latestvk97akvwfgt0q72vky02zb7wak5831cz8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Diary

Digital diary — daily entries, mood tracking, tag system, search, photo attachments, export, and monthly summaries.

Commands

CommandDescription
diary runExecute main function
diary listList all items
diary add <item>Add new item
diary statusShow current status
diary export <format>Export data
diary helpShow help

Usage

# Show help
diary help

# Quick start
diary run

Examples

# Run with defaults
diary run

# Check status
diary status

# Export results
diary export json

How It Works

Tips

  • Run diary help for all commands
  • Data stored in ~/.local/share/diary/

When to Use

  • to automate diary tasks in your workflow
  • for batch processing diary operations

Output

Returns formatted output to stdout. Redirect to a file with diary run > output.txt.

Configuration

Set DIARY_DIR environment variable to change the data directory. Default: ~/.local/share/diary/


Powered by BytesAgain | bytesagain.com Feedback & Feature Requests: https://bytesagain.com/feedback

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…