ClawHub

clawec-google-trend

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Google Trends lookup helper that sends user keywords and a Clawec API token to Clawec as part of its stated purpose.

Install only if you are comfortable sending trend research keywords, region codes, and a Clawec API token to Clawec. Avoid highly confidential query terms, keep CLAWEC_API_KEY out of logs and shared terminals, and use a revocable or scoped API key if Clawec provides one.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
**单词 + 美国：**

```bash
curl -s -X POST "https://www.clawec.com/api/aigc/ec/google_trend" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $CLAWEC_API_KEY" \
  -d '{"keyword":"wireless earbuds","region":"US"}'
Confidence
89% confidence
Finding
curl -s -X POST "https://www.clawec.com/api/aigc/ec/google_trend" \ -H "Content-Type: application/json" \ -H "Authorization: Bearer $CLAWEC_API_KEY" \ -d '{"keyword":"wireless earbuds","region":

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal