GoalGetter

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 8:13 PM UTC
• Version: 1.0.0

Overview

GoalGetter is a local markdown task and goal tracker with disclosed, purpose-aligned file writes under a dedicated folder.

Before installing, understand that using GoalGetter will store your task names, goal names, streak counts, and completion history in local markdown files under ~/.openclaw/goalgetter/. Use explicit commands for updates if you want to avoid accidental streak or task changes from casual phrasing.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The trigger phrases and description are broad enough that ordinary conversation about tasks or goals could unintentionally activate the skill. Because the skill performs file writes in the user's home directory, accidental invocation can cause unwanted persistent state changes even without explicit user intent.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The skill writes to and moves files under ~/.openclaw/goalgetter/, but the main description does not prominently warn users about these persistent filesystem side effects. Users may invoke the skill expecting a lightweight assistant action and instead cause local file creation, modification, or archival without informed consent.

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: Examples like "Did meditation" and "How's my meditation goal?" overlap heavily with normal conversation, making accidental activation plausible. In this skill's context, that ambiguity is more dangerous because some matching phrases would mutate files and streak counters rather than just display information.

Session Persistence

Medium

• Category: Rogue Agent

Content

## Notes

- Always create ~/.openclaw/goalgetter/ if it doesn't exist
- Use ISO dates (YYYY-MM-DD) for consistency
- Use read tool to view current state before modifying
- Use write tool to update files

• Confidence: 81% confidence
• Finding: The instruction to always create ~/.openclaw/goalgetter/ establishes persistent state on disk, which can survive across sessions and accumulate potentially sensitive personal productivity data. Persistence is not inherently malicious here, but it increases risk because accidental activation or misuse leaves durable artifacts in the user's home directory.

Missing User Warnings

Low

• Confidence: 82% confidence
• Finding: This markdown file explains that the skill creates, updates, and archives tasks, which affects user data stored on the local filesystem. While the storage path is documented later, the description does not clearly warn users up front that using these commands will write and move files under the local GoalGetter directory.

Static analysis

No suspicious patterns detected.