ClawHub
Back to skill

Security audit

Url To Obsidian

Security checks for vulnerabilities and agentic risk

Overview

This skill openly fetches a webpage and saves it as an Obsidian note, with the file-writing behavior aligned to its stated purpose.

Install this if you want a URL-to-Obsidian clipping workflow. Review the destination path before confirming, and avoid sending private or login-only pages through external fallback fetchers unless you are comfortable with that service receiving the page URL or content.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger list includes broad, everyday phrases such as '收藏到 obsidian' and '保存到 obsidian 知识库', which can cause the skill to activate in situations where the user did not intend to invoke a web-fetching and file-writing workflow. Because this skill can fetch remote content, create directories, and write files into an Obsidian vault, accidental invocation increases the chance of unintended network access and unwanted file creation.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill description does not prominently warn that the skill will write Markdown files and may create directories in the user's Obsidian vault. In context, this omission is security-relevant because the skill has Write/Edit/mkdir capabilities and broad triggers, so users may invoke it without realizing it performs persistent filesystem changes.

Static analysis

No suspicious patterns detected.