ClawHub
Back to skill

Security audit

my-notes-helper

Security checks for vulnerabilities and agentic risk

Overview

This is a very small notes/reference skill with a disclosed greeting script and no evidence of harmful behavior.

Before installing, understand that this appears to be a static tips-and-links bundle rather than a real note-storage tool. The included greeting script is disclosed and harmless as inspected, but users expecting actual personal knowledge management features may find the package misleading or incomplete.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
98% confidence
Finding
This is a mismatch because the declared purpose says the skill stores notes and references, but the actual code does not implement any note storage, retrieval, or knowledge-management behavior. Its primary behavior is merely outputting a greeting, which materially differs from the described functionality.

Description-Behavior Mismatch

Medium
Confidence
91% confidence
Finding
The manifest description at L03 frames the skill as a small personal knowledge-management helper for storing notes and references. The usage instructions at L18 add an operational behavior—running `scripts/hello.sh`—that is not part of storing or reading notes and expands the skill beyond its stated notes-helper purpose.

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
A notes helper for daily snippets and quick references does not obviously require executable shell-script functionality. Documenting `scripts/hello.sh` as part of usage and files introduces a capability category unrelated to personal knowledge management.

Static analysis

No suspicious patterns detected.