ClawHub
Back to skill

Security audit

Notebook

Security checks across malware telemetry and agentic risk

Overview

Notebook is a coherent local knowledge-base skill, but its file path handling and deletion behavior deserve review before installation.

Review before installing. Use only simple type names such as letters, numbers, hyphens, and underscores; avoid storing secrets; keep backups of the notebook data; and treat delete operations as permanent until the skill adds confirmation, soft delete, dependency updates, and strict path containment validation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill documents a destructive `notebook delete typename title` command without any warning, confirmation step, or recovery guidance. In a personal knowledge base handling local YAML data, this increases the risk of accidental data loss, especially if an agent follows terse user instructions automatically.

Known Vulnerable Dependency: js-yaml==4.1.1 — 1 advisory(ies): CVE-2026-53550 (JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases)

Low
Category
Supply Chain
Confidence
86% confidence
Finding
js-yaml==4.1.1

Known Vulnerable Dependency: uuid==13.0.0 — 1 advisory(ies): CVE-2026-41907 (uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided)

Low
Category
Supply Chain
Confidence
76% confidence
Finding
uuid==13.0.0

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.