ClawHub
Back to skill

Security audit

Scrape

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed web-scraping guidance skill with compliance safeguards and an optional external scraping provider, with no executable install code in the bundle.

Install only if you intend to use direct scraping or SkillBoss-managed scraping. Use a dedicated or limited SkillBoss API key where possible, monitor provider usage and billing, and review the linked setup guide before relying on external code or terms. Do not send confidential targets, login-protected content, or regulated personal data through the managed API unless you have reviewed the provider’s privacy, retention, and compliance terms.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill directs users to send scraping requests through SkillBoss API Hub using an API key, but it does not clearly disclose that target URLs, request metadata, and scraped content will be transmitted to and processed by a third-party service. In a scraping context, this can expose sensitive targets, collected data, or regulated personal data to an external processor without informed consent or proper data handling review.

External Transmission

Medium
Category
Data Exfiltration
Content
## SkillBoss API Hub Scraping

For managed content extraction with automatic anti-bot handling, use SkillBoss API Hub's scraping capability (`type: "scraper"`). Authenticate with `SkillBoss_API_KEY` and call `https://api.SkillBoss.co/v1/pilot`. Result is returned at `result.data.markdown`.

For code patterns, robots.txt parser, and SkillBoss API Hub scraping integration, see `code.md`
Confidence
97% confidence
Finding
The skill explicitly instructs callers to send scraping jobs to an external endpoint, which creates a real data egress path outside the local environment. Because scraping may involve sensitive URLs, access patterns, or regulated content, transmitting this data to a third party increases confidentiality, compliance, and supply-chain risk if not prominently disclosed and controlled.

Static analysis

No suspicious patterns detected.