ClawHub
Back to skill

Security audit

vortex-notes

Security checks across malware telemetry and agentic risk

Overview

This skill clearly acts as a local notes assistant for a user-selected markdown vault, with expected read, search, and write behavior disclosed in the instructions.

Install this only if you want an agent to read and modify your Vortex Notes vault. Use a dedicated vault path, review remembered facts periodically, and ask for read-only MCP mode when you only want search or context building.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
89% confidence
Finding
The skill description uses very broad trigger phrases like 'note this down' and 'remember that…', which overlap with normal conversation and can cause unintended invocation. In a skill that writes to a local notes vault, ambiguous activation increases the chance of accidental persistence of sensitive or irrelevant user content without clear intent confirmation.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly instructs the agent to create and edit files in the user's local vault, but it does not require a user-facing warning or confirmation before modifying local files. This can lead to silent or unexpected changes to user data, especially when combined with broad invocation language and durable-memory behavior.

Memory Manipulation

High
Category
Memory Poisoning
Content
(or `memory/<topic>.md`) as `- **YYYY-MM-DD** <fact> \`^f-<8 random chars>\``.
  If the fact REPLACES an earlier one, strike the old line through
  (`- ~~old line~~ → superseded YYYY-MM-DD by \`^f-new\``) and keep it —
  never delete history.
- **New notes**: create `<kebab-case-title>.md` (optionally in a folder) with
  frontmatter `title:` and `created:`/`updated:` ISO timestamps.
- **Edits**: edit surgically (append a section, fix a line). Never rewrite a
Confidence
78% confidence
Finding
delete history

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.