Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Amazon ASIN lookup helper that sends the provided product identifier to Clawec's API using a user-provided API key.
Before installing, users should understand that product URLs or ASINs and the selected region will be sent to Clawec, authenticated with their CLAWEC_API_KEY. Do not use sensitive account-specific URLs unless you are comfortable sending them to that service.
The skill includes executable shell usage examples and references a local script, but it does not declare any tool scope or allowed-tools constraints. That omission can cause an agent runtime to permit broader-than-necessary execution behavior, increasing the chance of unintended command execution or misuse of shell capabilities.
The skill instructs the agent to send user-supplied product URLs or ASINs plus an API credential to a third-party external service. Any external transmission introduces confidentiality and trust risks, especially if users provide sensitive URLs, account-linked identifiers, or if the agent sends data without explicit user awareness/consent.
按商品链接：
curl -s -X POST "https://www.clawec.com/api/aigc/tool/amazon_asin_query" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $CLAWEC_API_KEY" \
-d '{"url":"https://www.amazon.com/dp/B0XXXXXXXX"}'
The markdown instructs the skill to produce a '默认中文摘要' (default Chinese summary), which imposes a language preference without indicating user choice or opt-in. Under the policy, forcing a specific language is a natural-language locale violation unless the skill offers a language choice or clearly justifies the constraint.
Line L38 instructs that unknown field names should be presented to users using Chinese labels. This imposes a specific language for user-facing output, and the file does not mention any user language preference, opt-in, or justified locale restriction.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
PAYLOAD=$(python3 -c 'import json,sys; print(json.dumps({"asin": sys.argv[1], "region": sys.argv[2]}))' "$ARG1" "$REGION")
fi
curl -s -X POST "https://www.clawec.com/api/aigc/tool/amazon_asin_query" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $API_KEY" \
-d "$PAYLOAD"
This shell script performs an HTTP POST to an external API using user-supplied URL/ASIN data and an Authorization bearer token from an environment variable. The file contains no comment, log message, or confirmation indicating that data will be transmitted off-system, so users may not realize their input and credentials are being used in a network call.
The usage and environment-variable error messages are hardcoded in Chinese, which imposes a specific language on users regardless of their locale. There is no opt-in, fallback, or documentation indicating that the skill is intended only for Chinese-speaking users or a China-specific environment.
No suspicious patterns detected.