ClawHub
Back to skill

Security audit

bookmark-intelligence-free

Security checks for vulnerabilities and agentic risk

Overview

The skill is broadly aligned with X bookmark archiving, but it should be reviewed because it asks users to handle live X session cookies and includes an under-explained callback URL despite saying there is no third-party telemetry.

Review this before installing. Only use it if you are comfortable providing X session cookies, storing bookmark data locally, and manually controlling when it runs. Do not provide a callback URL unless the publisher clearly documents exactly what will be sent there.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Intent-Code Divergence

Medium
Confidence
82% confidence
Finding
The skill claims data and credentials do not leave the machine except to X, yet it also defines an optional callback URL for asynchronous notifications. That discrepancy can mislead users about network egress and could result in bookmark metadata, status information, or other sensitive outputs being sent to arbitrary third-party endpoints without sufficiently explicit disclosure.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill instructs users to extract and store X/Twitter authentication cookies (`auth_token` and `ct0`) locally, which are highly sensitive session credentials. Presenting this workflow without a strong upfront warning increases the chance users mishandle live account tokens, store them insecurely, or expose them through logs, shell history, backups, or accidental commits.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The description says the skill will fetch X bookmarks and write results locally, but it does not clearly warn at the outset that using the skill will transmit authenticated requests and bookmark content to X/Twitter. In a credential-backed scraping context, incomplete disclosure can cause users to underestimate privacy, account-security, and terms-of-service risks.

Static analysis

No suspicious patterns detected.