ClawHub
Back to skill

Security audit

Brave Search Old

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward web search and page extraction skill with documentation mismatches users should understand before installing.

Install only if you are comfortable with search queries being sent to Brave and selected URLs being fetched from your machine. Do not provide a Brave API key unless the skill is updated to actually use the official API. Avoid using the URL extraction command on private or internal addresses unless that is intentional, and treat extracted page text as untrusted.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation exposes network-capable behavior but does not declare any corresponding permissions or constraints. Undeclared network access reduces transparency and can enable unintended outbound requests, data exfiltration, or use in contexts where the agent/operator expected a lower-trust skill surface.

Tp4

High
Category
MCP Tool Poisoning
Confidence
94% confidence
Finding
The documented purpose says the skill uses the Brave Search API for search/content lookup, but the behavior reportedly also includes arbitrary URL fetching and scraping the Brave Search website directly. This mismatch is dangerous because it expands the trust boundary beyond what users expect, enabling unreviewed content retrieval paths, possible SSRF-like misuse, and brittle scraping behavior that bypasses intended API controls.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.