ClawHub
Back to skill

Security audit

Taobao Price Monitor

Security checks across malware telemetry and agentic risk

Overview

This appears to be a basic Taobao price checker, but it asks for persistent Taobao cookie use and advertises several capabilities that are not actually included.

Review before installing. Treat this as a simple Taobao price-query script, not a complete monitoring product. Avoid providing your main Taobao login cookie; if a cookie is unavoidable, use a low-risk account, remove or rotate the cookie afterward, and do not enable cron or expose any local API unless you understand the ongoing access.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill clearly requires network access for price queries, Playwright-driven scraping, and a local HTTP API, yet no explicit permissions are declared. This creates a transparency and review gap: users and the platform cannot accurately assess what capabilities the skill needs before installation or execution.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The documentation instructs users to place a live Taobao session cookie in persistent configuration to bypass anti-bot protections, but it does not warn that this cookie is effectively an account credential. If leaked, logged, exported, or mishandled by the skill or host environment, it could enable account takeover or unauthorized access to user data.

Missing User Warnings

Low
Confidence
78% confidence
Finding
The skill advertises an HTTP endpoint for local access but provides no guidance on authentication, binding scope, or local service exposure. Even if intended for localhost, undocumented local APIs can become reachable through misconfiguration, port forwarding, shared hosts, or malware on the same machine.

VirusTotal

67/67 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.