ClawHub
Back to skill

Security audit

Bear Notes

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward Bear Notes helper, with the main caution that it stores a Bear API token in a local plaintext file.

Install only if you trust the grizzly CLI and are comfortable allowing an agent to read or change your Bear notes. Treat the Bear API token like a password, restrict permissions on ~/.config/grizzly and the token file, avoid putting real tokens into shell history, and use --dry-run or --print-url when you want to preview actions before they affect notes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly instructs users to place a Bear API token in a predictable plaintext file under ~/.config/grizzly/token without warning that the token is a sensitive credential or recommending restrictive file permissions. While local token files are common for CLI tools, documenting this storage pattern without security guidance increases the risk of credential exposure through overly broad filesystem permissions, backups, shell history, or accidental disclosure.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.