ClawHub
Back to skill

Security audit

my-notes-helper

Security checks across malware telemetry and agentic risk

Overview

This is a very small notes/reference skill with a disclosed greeting script and no evidence of harmful behavior.

Before installing, understand that this appears to be a static tips-and-links bundle rather than a real note-storage tool. The included greeting script is disclosed and harmless as inspected, but users expecting actual personal knowledge management features may find the package misleading or incomplete.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
98% confidence
Finding
This is a mismatch because the declared purpose says the skill stores notes and references, but the actual code does not implement any note storage, retrieval, or knowledge-management behavior. Its primary behavior is merely outputting a greeting, which materially differs from the described functionality.

Description-Behavior Mismatch

Medium
Confidence
91% confidence
Finding
The manifest description at L03 frames the skill as a small personal knowledge-management helper for storing notes and references. The usage instructions at L18 add an operational behavior—running `scripts/hello.sh`—that is not part of storing or reading notes and expands the skill beyond its stated notes-helper purpose.

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
A notes helper for daily snippets and quick references does not obviously require executable shell-script functionality. Documenting `scripts/hello.sh` as part of usage and files introduces a capability category unrelated to personal knowledge management.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.