ClawHub
Back to skill

Security audit

clawec-amazon-best-seller

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Clawec API helper for Amazon Best Sellers lookups; it sends a category and API key to Clawec but shows no hidden persistence, unrelated data access, or destructive behavior.

Install only if you trust Clawec with your Clawec API key and the Amazon category queries you submit. Store the key in CLAWEC_API_KEY, avoid including unrelated private business data in prompts used with this skill, and rotate the key if it is exposed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
86% confidence
Finding
The skill includes shell-based execution examples and references to running a local script, but does not declare corresponding permissions. This creates a capability mismatch: an agent or reviewer may underestimate that the skill can trigger command execution and outbound network activity, increasing the chance of unsafe or unauthorized use.

Vague Triggers

Medium
Confidence
80% confidence
Finding
The invocation description is broad enough that the skill could be triggered for a wide range of shopping, research, or competitor-analysis requests without clear user intent to call an external service. That increases the risk of unexpected external requests and data disclosure when the user may have only asked for general information.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs sending requests to a third-party API but does not provide a clear user-facing warning that data will leave the local system and be transmitted to Clawec. Even if the payload is usually just a category code, users may reasonably be unaware that their query context or derived parameters are being shared externally.

External Transmission

Medium
Category
Data Exfiltration
Content
**不限类目（默认）：**

```bash
curl -s -X POST "https://www.clawec.com/api/aigc/tool/amazon_best_seller" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $CLAWEC_API_KEY" \
  -d '{"cat":""}'
Confidence
95% confidence
Finding
curl -s -X POST "https://www.clawec.com/api/aigc/tool/amazon_best_seller" \ -H "Content-Type: application/json" \ -H "Authorization: Bearer $CLAWEC_API_KEY" \ -d '{"cat":""}' ``` **指定类目：** ```

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.