ClawHub
Back to skill

Security audit

calendar-reminder-free

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Outlook-to-Feishu calendar reminder with user-enabled scheduling, but it handles private calendar metadata and should be configured carefully.

Install only if you are comfortable sending Outlook meeting details such as titles, times, organizers, and locations to the configured Feishu recipient on an ongoing daily schedule. Confirm the Feishu open_id, timezone, and cron entry before enabling it, and avoid running the optional sudo package command unless you actually need tzdata and trust your system package manager.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill reads Outlook calendar contents and forwards schedule details to Feishu, which involves potentially sensitive meeting metadata such as titles, organizers, times, and locations. Failing to prominently warn users about this data flow undermines informed consent and can lead to unintended disclosure of personal or work-sensitive calendar information to a third-party messaging platform.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The cron registration instructions enable recurring automatic execution that continuously scans calendar contents and sends notifications, but the documentation does not clearly warn users that this persists beyond the current session. That can cause ongoing background processing and repeated disclosure of future schedule data without the user fully understanding the automation they are enabling.

Natural-Language Policy Violations

Medium
Confidence
77% confidence
Finding
Hardcoding Asia/Shanghai behavior without explicit user opt-in can cause reminders to trigger at incorrect times and may expose schedule information at unintended hours, especially for users traveling or operating across regions. While not a direct code-execution issue, forced locale assumptions can create privacy and reliability problems in a scheduling skill.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
### 3. zoneinfo 模块导入失败

**原因**: Python 版本低于 3.9 或 Linux 未安装 tzdata.
**处理**: 升级 Python 到 3.9+;在 Debian/Ubuntu 执行 `sudo apt install tzdata`;macOS 通常已内置.
### 4. cron 任务未触发

**原因**: skill-platform 服务未运行或时区配置错误.
Confidence
82% confidence
Finding
The documentation instructs users to run a command with sudo, which normalizes privilege escalation for troubleshooting even though installing tzdata is unrelated to the core reminder logic. Encouraging elevated execution increases the chance that users run ancillary setup steps with unnecessary root privileges, expanding the blast radius if future commands are modified, copied incorrectly, or paired with other unsafe instructions.

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.