Private Knowledge Base

Store, search, and summarize concepts across your PDFs and papers with fast semantic search and cross-document Q&A.

This skill appears to do what it says and works only on local files, but consider the following before installing or running it: - KB metadata stores the absolute source path in index JSON — if you later upload the KB or share it, that may reveal filesystem layout or sensitive directory names. Consider setting KB_ROOT to a dedicated directory and reviewing index JSON files before sharing. - The scripts will read any file you pass to them; only give them PDFs you trust. They write extracted text under KB_ROOT/docs and metadata under KB_ROOT/index. - summarize.sh suggests using 'ollama run qwen3.5' (a local model runtime). That step is optional and not enforced by the scripts; if you run it, verify your ollama setup and understand whether that model is local or configured to call an external service. - The scripts rely on pdftotext or python (pypdf). Installing those packages may be required; install them from well-known sources. - If you plan to back up or share the KB, review contents for sensitive information (full paths, PII in extracted text) first. Overall this is internally consistent and low-risk for local use, but be cautious about storing or sharing the generated index and text files.

Type: OpenClaw Skill Name: private-knowledge-base Version: 1.0.0 The skill bundle contains critical command injection vulnerabilities in `scripts/ingest.sh`. Specifically, the script constructs a Python command string using unquoted shell variables (`$PDF_PATH`), which allows for arbitrary Python code execution if a filename contains single quotes. Furthermore, the script uses unquoted variables within a shell heredoc to generate metadata, enabling command substitution (e.g., via backticks or `$()`) if a filename is maliciously crafted. While these flaws provide a path for Remote Code Execution (RCE), they appear to be unintentional security oversights in a functional document management system rather than intentional malware.