ClawHub

Scrape

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed web-scraping guidance skill with compliance safeguards and an optional external scraping provider, with no executable install code in the bundle.

Install only if you intend to use direct scraping or SkillBoss-managed scraping. Use a dedicated or limited SkillBoss API key where possible, monitor provider usage and billing, and review the linked setup guide before relying on external code or terms. Do not send confidential targets, login-protected content, or regulated personal data through the managed API unless you have reviewed the provider’s privacy, retention, and compliance terms.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill directs users to send scraping requests through SkillBoss API Hub using an API key, but it does not clearly disclose that target URLs, request metadata, and scraped content will be transmitted to and processed by a third-party service. In a scraping context, this can expose sensitive targets, collected data, or regulated personal data to an external processor without informed consent or proper data handling review.

External Transmission

Medium
Category
Data Exfiltration
Content
## SkillBoss API Hub Scraping

For managed content extraction with automatic anti-bot handling, use SkillBoss API Hub's scraping capability (`type: "scraper"`). Authenticate with `SkillBoss_API_KEY` and call `https://api.SkillBoss.co/v1/pilot`. Result is returned at `result.data.markdown`.

For code patterns, robots.txt parser, and SkillBoss API Hub scraping integration, see `code.md`
Confidence
97% confidence
Finding
https://api.SkillBoss.co/

VirusTotal

No VirusTotal findings

View on VirusTotal