ClawHub
Back to skill

Security audit

Karpathy Query Feedback

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says: searches M-Flow memory and saves query results into a local wiki, but users should understand that this creates persistent notes.

Install this only if you want M-Flow memory search results written into a local wiki for later reuse. Avoid using it on sensitive queries unless persistent storage is acceptable, review the generated knowledge/wiki/ files periodically, and make sure you also trust the m-flow-memory dependency.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The activation conditions are broad enough that the skill could trigger on ordinary knowledge queries or generic session-to-knowledge workflows without clear user intent. Because the workflow performs persistence into a wiki layer, unintended invocation can silently store data and alter downstream knowledge compilation behavior.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill explicitly describes taking query results and saving them into persistent wiki storage, but it does not mention user notice, consent, retention limits, or review controls. This creates a real risk of storing sensitive, incorrect, or context-specific session data permanently, which can later contaminate retrieval or be exposed through subsequent knowledge access.

Static analysis

No suspicious patterns detected.