voice-memo-sync
What this skill does
Voice memo synchronization, transcription, and organization with Apple Notes & Reminders integration.
github/leoyeai - Data Exfiltration - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=voice-memo-syncAssessments (3)
Data Exfiltration
Data Exfiltration via local-llm-review
scripts/create-apple-note.sh
The script uses osascript to create Apple Notes with user-provided HTML content. If the content contains sensitive information, it could be used to exfiltrate data through the Notes app.Privacy Risk
Privacy Risk via local-llm-review
scripts/monitor-transcription.sh
The script logs transcription tasks to a log file. If the logs are not properly secured, they could contain sensitive audio content or metadata.Configuration Risk
Configuration Risk via local-llm-review
scripts/install.sh
The script adds a heartbeat task to HEARTBEAT.md that runs daily at 08:00. If the task is misconfigured, it could cause unintended behavior or performance issues.Badge
Add the Anomity scan badge for voice-memo-sync to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of voice-memo-sync? Report an issue or request a rescan.
