ClawHub
Back to skill

Security audit

Multi-source retrieval with confidence scoring - web, academic, and Tavily in one unified API

Security checks across malware telemetry and agentic risk

Overview

This skill is an API-backed search client that sends user queries or URLs to AIsa as documented, with privacy considerations but no hidden or destructive behavior found.

Install only if you are comfortable sending search terms, URLs, and possibly retrieved page content or summaries to AIsa and downstream search providers. Use a dedicated revocable AISA_API_KEY, monitor usage or billing, and do not use crawl, map, extract, or explain on secrets, authenticated pages, internal systems, private documents, or regulated data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill requires network access and an API key via environment variables, but it does not declare permissions in a way that clearly informs a host platform or user about those capabilities. This creates a transparency and policy-enforcement gap: an agent may invoke external services and consume credentials without explicit approval boundaries.

Tp4

High
Category
MCP Tool Poisoning
Confidence
93% confidence
Finding
The stated description emphasizes intelligent search, but the documented behavior also includes full-text retrieval, URL extraction, crawling, sitemap generation, and result explanation through additional endpoints. That broader behavior materially expands data collection and transmission scope, increasing the chance users or orchestrators invoke capabilities they did not knowingly approve.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill sends user queries and supplied URLs to a third-party API, but the documentation does not clearly warn that potentially sensitive prompts, targets, and retrieved content leave the local environment. In an agent setting, this can leak internal research topics, proprietary URLs, or confidential investigation context to an external provider.

Missing User Warnings

Low
Confidence
82% confidence
Finding
The documentation instructs users to export an API key but gives no guidance on secure credential handling, storage, rotation, or avoiding accidental disclosure in logs and shell history. While not an exploit by itself, this omission increases the likelihood of credential leakage or misuse in operational environments.

External Transmission

Medium
Category
Data Exfiltration
Content
-d '{"query":"latest AI developments"}'

# Extract content from URLs
curl -X POST "https://api.aisa.one/apis/v1/tavily/extract" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"urls":["https://example.com/article"]}'
Confidence
96% confidence
Finding
https://api.aisa.one/

External Transmission

Medium
Category
Data Exfiltration
Content
-d '{"urls":["https://example.com/article"]}'

# Crawl web pages
curl -X POST "https://api.aisa.one/apis/v1/tavily/crawl" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com","max_depth":2}'
Confidence
97% confidence
Finding
https://api.aisa.one/

External Transmission

Medium
Category
Data Exfiltration
Content
-d '{"url":"https://example.com","max_depth":2}'

# Site map
curl -X POST "https://api.aisa.one/apis/v1/tavily/map" \
  -H "Authorization: Bearer $AISA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'
Confidence
94% confidence
Finding
https://api.aisa.one/

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.