ClawHub
Back to skill

Security audit

Kan.bn TODO API

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Kan.bn task-management helper that can change or delete Kan.bn tasks, but the reviewed artifacts do not show hidden persistence, exfiltration, or unrelated behavior.

Install this only if you want an agent to manage Kan.bn through your account. Use the least-privileged Kan.bn token available, verify KANBN_BASE_URL, avoid ~/.bashrc credential discovery unless intentional, and require explicit confirmation before deletes, list deletion, profile updates, or ambiguous task matches.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The script reads secrets from ~/.bashrc as a fallback, expanding its access from the declared Kan.bn API interaction to arbitrary local shell configuration data. Even though it currently only extracts specific variable names, this still crosses a trust boundary and exposes sensitive local credentials from a broader source than necessary for the skill's stated purpose.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill documents a direct `todo-delete` command with no guidance to confirm user intent, preview the target, or warn about permanence. In an agent setting, ambiguous language or mistaken card resolution could lead to irreversible deletion of the wrong task, especially because the skill encourages discovery and inference when IDs are missing.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The smoke test instructs operators to perform live create and delete operations against the Kan.bn API, which modifies external state. Although the task is framed as disposable test data, the documentation does not prominently warn that these are real write operations or require use of a dedicated test workspace/list, increasing the chance of accidental changes or deletion in a production personal board.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.