Bear Notes Hardened

• Analyzed: May 3, 2026, 2:22 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7b8fb905f2f0aeaa6bb1d5a548865468366c7aea95edfb10e5b781d0a6927a2d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'bear-notes-hardened' skill is a security-focused wrapper for the grizzly CLI tool on macOS. It includes explicit defensive instructions (guardrails) in SKILL.md designed to prevent the AI agent from exfiltrating note content to external URLs, leaking the Bear API token, or performing unauthorized bulk data enumeration. The package demonstrates high security maturity by documenting its safety evaluations in SAFETY.md and specifically addressing prompt-injection risks through negative constraints in the agent instructions.