ClawHub
Back to skill

Security audit

Save To Obsidian Publish

Security checks across malware telemetry and agentic risk

Overview

This skill appears to save articles to Obsidian as advertised, but it can route user-supplied URLs through a third-party reader service and uses anti-scraping fetch methods without clear upfront user control.

Review before installing. Use it only with public URLs you are comfortable fetching, potentially sending to r.jina.ai, and storing in your Obsidian vault. Avoid private, internal, authenticated, or sensitive links unless the skill adds an explicit third-party-fetch opt-in and clearer controls for destination paths, media downloads, and file sizes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
88% confidence
Finding
The script contains deliberate anti-scraping evasion behavior, including alternate user agents, referer spoofing, retries, and use of the r.jina.ai relay to obtain content when direct retrieval is blocked. In an agent skill context, this expands data access beyond normal site controls and may cause the agent to exfiltrate requested URLs and retrieve content through an unintended third party.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill description clearly states it saves web articles to an Obsidian knowledge base, localizes images, and writes files into the user's vault, but it does not prominently warn users that running the skill will fetch remote content and create local files. This can lead users to unknowingly import untrusted content, consume storage/bandwidth, and modify synced notes or attachments in a sensitive personal knowledge base.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.