Remind Myself

• Outcome: Review
• Latest audit: May 29, 2026 at 9:22 PM UTC
• Version:
  1.0.6

Overview

This reminder skill has a coherent purpose, but its documented command can let specially crafted reminder text be interpreted by the local shell.

Review before installing. Only use it for non-sensitive reminders, verify the Telegram chat ID and interpreted timezone, and avoid reminder text containing shell metacharacters such as quotes, backticks, dollar signs, semicolons, or command substitutions until the invocation is hardened.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The README explicitly states that the skill schedules persistent cron jobs and delivers reminder contents to Telegram, but it does not warn users that reminder text may be stored locally and transmitted to an external messaging service. In this context, users may include sensitive personal or operational information in reminders, creating privacy and data-handling risk if they are unaware of persistence and third-party delivery.

Natural-Language Policy Violations

Medium

• Confidence: 91% confidence
• Finding: The skill hardcodes Europe/Paris for absolute-time conversion without requiring user opt-in or checking user locale, which can cause reminders to be scheduled at the wrong real-world time. In a scheduling workflow, silent timezone coercion can lead to missed deadlines, privacy issues, or unintended notifications at sensitive times.

VirusTotal

64/64 vendors flagged this skill as clean.