clawec-1688-product-search

• Analyzed: May 15, 2026, 6:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: 21bb02563599a26aeab8da24b56ea7b6bd5159c6e74c5dc8a8cd5462a40799b7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for searching 1688 products via the Clawec API (clawec.com). It includes a simple bash script (scripts/search.sh) that uses curl to fetch product data and instructions in SKILL.md for the AI agent to handle the API key and response data appropriately. No signs of data exfiltration, malicious execution, or prompt injection were found.