ClawHub
Back to skill

Security audit

calendar-reminder

Security checks across malware telemetry and agentic risk

Overview

This skill describes a useful calendar-reminder workflow, but it overclaims implementation and would persistently send potentially sensitive Outlook calendar details to Feishu without enough scoping or consent controls.

Review carefully before installing. This appears to be a documentation-only or unfinished skill, not a complete implementation. Do not enable the cron job or point it at a Feishu group until you have inspected the actual calendar_reminder.py script, limited which calendar fields are sent, confirmed all recipients should see the calendar contents, and verified how to pause or remove the scheduled task.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
94% confidence
Finding
The skill advertises a fully automated Outlook-to-Feishu reminder workflow, but the referenced verification and implementation section contains only a placeholder echo command. This mismatch can mislead users into trusting that calendar access, outbound messaging, and scheduling behavior have been implemented and reviewed when they have not, increasing the chance of unsafe ad hoc additions or deceptive distribution.

Intent-Code Divergence

Medium
Confidence
96% confidence
Finding
The documentation explicitly calls the snippet the skill's core implementation logic, yet it only prints a static string. This is dangerous because users or reviewers may falsely conclude that the advertised automation has been validated, masking missing logic around calendar access, notification delivery, error handling, and consent boundaries.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill description does not prominently warn that it will automatically read all next-day Outlook calendar events and forward their contents to Feishu recipients, potentially including group chats. Because calendar entries often contain sensitive business details, participants, locations, and meeting links, lack of explicit upfront disclosure creates a privacy and data-sharing risk.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The instructions describe registering a persistent cron job that will continue running and sending outbound reminders until paused or removed, but they do not provide an upfront warning about this ongoing behavior. Persistent unattended automation can lead to repeated unintended disclosures, notification spam, and continued operation after users forget it was enabled.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.