ClawHub
Back to skill

Security audit

Facebook Marketplace Search

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed local-service client for Marketplace searches, with dependency hygiene issues but no hidden persistence, credential use, or destructive behavior found.

Install this only if you understand it does not search Facebook by itself: it sends your search terms and location to the local or configured Marketplace API service. Keep the endpoint on localhost or another service you control, use a virtual environment, and prefer removing unused Flask plus pinning dependencies for reproducible installs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Unpinned Dependencies

Low
Category
Supply Chain
Content
Flask>=3.0.0
requests>=2.31.0
Confidence
98% confidence
Finding
Using an unpinned dependency range for Flask allows future installs to resolve to different versions over time, which can introduce breaking changes or newly disclosed vulnerable releases without any code change in the skill itself. In a network-facing Flask-based service, this weakens supply-chain control and makes builds non-reproducible, increasing the chance of accidental exposure to vulnerable versions.

Unpinned Dependencies

Low
Category
Supply Chain
Content
Flask>=3.0.0
requests>=2.31.0
Confidence
98% confidence
Finding
Using requests>=2.31.0 permits installation of any later version, making dependency resolution non-deterministic and weakening protection against supply-chain regressions or vulnerable releases. Because this skill is a thin client that makes outbound HTTP requests to a user-provided local Marketplace service, trust in the HTTP stack matters and unpinned versions increase operational and security risk.

Known Vulnerable Dependency: Flask — 8 advisory(ies): CVE-2025-47278 (Flask uses fallback key instead of current signing key); CVE-2018-1000656 (Flask is vulnerable to Denial of Service via incorrect encoding of JSON data); CVE-2019-1010083 (Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory u) +5 more

High
Category
Supply Chain
Confidence
90% confidence
Finding
The dependency specification allows Flask 3.0.0 or later, and the static analysis indicates Flask has multiple known advisories. Because no exact safe version is pinned, deployments may install a vulnerable Flask release, which is particularly relevant for a web-facing framework where issues can lead to denial of service, signing/key handling problems, or other server-side compromise paths.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
92% confidence
Finding
The skill depends on requests for outbound network communication, and the analyzer reports multiple advisories affecting that package. In this skill's context, where requests may be made to user-supplied or locally configured endpoints, issues such as credential leakage, verification flaws, or request handling bugs can directly affect confidentiality and integrity of communications.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.install_untrusted_source

Install source points to URL shortener or raw IP.

Warn
Code
suspicious.install_untrusted_source
Location
config.example.json:2