ClawHub
Back to skill

Security audit

Brazil Kyb

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward paid lookup helper for Brazilian company verification, with the main user consideration being that some calls send queries to a third-party API and can spend small USDC amounts automatically.

Before installing, make sure you are comfortable with company identifiers or search terms being sent to api.brazilayer.com and with x402/agentcash making the listed small USDC payments. For best control, ask the agent to confirm the exact route and price before any paid lookup.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill explicitly states that using the fetch tool with agentcash causes payment to occur automatically, but it does not require explicit user consent at execution time or a prominent warning before charges are incurred. In an agent setting, this can lead to unintended paid requests, especially when a user only asked for information and did not authorize spending.

External Transmission

Medium
Category
Data Exfiltration
Content
## Inputs

- **CNPJ**: 14 digits, with or without punctuation (`00.000.000/0001-91` = `00000000000191`).
  Validate the check digits for free before paying: `GET https://api.brazilayer.com/v1/ferramentas/cnpj/<cnpj>`.
- If you only have a name, search first (paid, US$ 0.01):
  `GET https://api.brazilayer.com/v1/cnpj/busca?q=<name>`.
Confidence
87% confidence
Finding
The skill instructs sending CNPJ values and possibly company names to a third-party API, which is an external data transmission. While this is core to the skill's function and not inherently malicious, it can still expose user-supplied business identifiers or search terms to an external service without explicit privacy guidance or consent boundaries.

External Transmission

Medium
Category
Data Exfiltration
Content
- **CNPJ**: 14 digits, with or without punctuation (`00.000.000/0001-91` = `00000000000191`).
  Validate the check digits for free before paying: `GET https://api.brazilayer.com/v1/ferramentas/cnpj/<cnpj>`.
- If you only have a name, search first (paid, US$ 0.01):
  `GET https://api.brazilayer.com/v1/cnpj/busca?q=<name>`.

## Free, no payment
Confidence
86% confidence
Finding
The paid name-search flow transmits a company name query to an external service and may also incur charges. In context this is expected behavior, but the combination of external transmission and a paid lookup increases the risk of unintended disclosure and unintended spending if performed automatically.

External Transmission

Medium
Category
Data Exfiltration
Content
## Free, no payment

- `GET https://api.brazilayer.com/v1/cnpj/amostra` and `/v1/integridade/amostra`: sample responses to see the shape.
- `GET https://api.brazilayer.com/v1/ferramentas/cnpj/<cnpj>`: check-digit validation only (does not say whether the company exists).
- `GET https://api.brazilayer.com/.well-known/x402`: every paid route with price.
Confidence
78% confidence
Finding
The sample and validation endpoints involve contacting an external service, so the finding is technically valid as external transmission. However, the data involved is limited and one endpoint is explicitly free validation, which makes the security risk lower than other findings.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.