Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed ClawEC API integration for Amazon bestseller lookup, with limited outbound data and no persistence or hidden local behavior found.
Install only if you are comfortable using a third-party ClawEC API key and sending the selected Amazon category value to clawec.com. Prefer setting CLAWEC_API_KEY in your environment rather than pasting or hardcoding it, and validate category names against the documented allowlist before calling the helper script.
The skill explicitly instructs use of shell commands (curl, bash scripts/rank.sh) but does not declare any tool scope such as permissions or allowed-tools. This creates an authorization gap where an agent may execute shell/network-capable actions without an explicit least-privilege boundary, increasing the chance of unintended command execution or broader environment access.
The skill sends data and an authorization bearer token to an external third-party API endpoint. External transmission is expected for this integration, but it still carries security risk because secrets are used in outbound requests and any user-provided category or derived data leaves the local trust boundary.
不限类目（默认）：
curl -s -X POST "https://www.clawec.com/api/aigc/tool/amazon_best_seller" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $CLAWEC_API_KEY" \
-d '{"cat":""}'
This markdown file uses Chinese exclusively for headings, field descriptions, and usage guidance, which can amount to a language policy violation if the organization expects skills to avoid forcing a specific language without user opt-in. There is no indication that the skill is region-specific or that users can choose another language.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
PAYLOAD=$(python3 -c 'import json,sys; print(json.dumps({"cat": sys.argv[1]}))' "$CAT")
curl -s -X POST "https://www.clawec.com/api/aigc/tool/amazon_best_seller" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $API_KEY" \
-d "$PAYLOAD"
This code performs an HTTP POST to a third-party domain and includes both the user-supplied category payload and a bearer token from an environment variable. There is no prompt, logging, comment, or surrounding documentation in this file disclosing that data will be transmitted externally.
The markdown instructs the skill to produce a '默认中文摘要', which imposes a specific language preference without asking the user or documenting an opt-in. This matches the policy category for language or locale constraints applied across any file type.
The error text for a missing API key is hardcoded in Chinese ("请设置环境变量 CLAWEC_API_KEY"), which imposes a specific language on users regardless of their locale. No opt-in, alternative language, or documented region-specific justification is present in the file.