ClawHub
Back to skill

Security audit

Mayar Payment Integration

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate Mayar payment helper, but it gives agents live payment-account access with too little guidance around secrets, confirmations, and customer messaging.

Install only if you intend to let an agent work with a Mayar account. Use sandbox credentials first, protect and rotate the API token, prefer secret-managed configuration, verify the MCP package/source, and require explicit review before invoices, webhooks, reports, or WhatsApp messages are sent.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to place a live payment API token in a local credentials file and to pass it as an Authorization header to a remote MCP endpoint, but it does not include explicit warnings about token sensitivity, least-privilege handling, rotation, or avoiding logs/history leakage. Because this token can authorize payment operations and access transaction/customer data, poor handling could expose financial systems or sensitive business data.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The examples send customer and transaction-related information over WhatsApp without any warning about consent, privacy expectations, or minimizing sensitive data. This can expose personal and payment metadata through third-party messaging channels, increasing privacy and compliance risk if copied into production unchanged.

Credential Access

High
Category
Privilege Escalation
Content
// 3. Grant course access
  await grantCourseAccess(paidInvoice.customer.email);
  
  // 4. Send access credentials
  message({
    action: 'send',
    channel: 'whatsapp',
Confidence
79% confidence
Finding
access credentials

VirusTotal

44/44 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.