ClawAudit verdict

gemini-deep-research

gemini-deep-research-notion

88
🟢 Trusted
Low risk — reviewed by ClawAudit, behavior matches stated purpose

Automates Gemini Deep Research in the main session as described; no malicious exfiltration or hidden behavior.

⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.

Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

90
security
90
transparency
70
maintenance

Findings (2)

Coarse signal — prose, single-step high

Instruction-prose smuggling shape detected: collects a sensitive target ("API key") and emits it outward ("report"). Phrased as prose with no trigger tokens — a semantic prompt-injection / data-exfil pattern the syntactic scanners can't see. Final tier capped at Caution; review the instructions before installing.

SKILL.md · 1. Read the Notion API key: `cat ~/.config/notion/api_key` 2. Parse the report into Notion blocks: - Lines starting with `#` → heading_2/heading_3 blocks - Bull

Pattern match medium

Uses exec() — may execute shell commands

SKILL.md · prose · downgraded · exec(

Permissions & capabilities

No declared permissions — minimal attack surface.

Is this flag fair?

Check another skill Browse the registry Auditing your own skills or configs? Use the API