Security audit
Security checks for vulnerabilities and agentic risk
This skill is a narrow, disclosed Ozon product-detail lookup that sends user-supplied product IDs to the ClawEC API using a user-provided API key.
Install this only if you are comfortable sending the queried Ozon item IDs and your ClawEC API credential to clawec.com. Keep the API key in an environment variable or secret store, avoid pasting it into shared logs or chats, and review product IDs before running batch queries.
The skill includes shell-based execution examples and an explicit script invocation, but it does not declare any tool scope or allowed-tools restrictions. That increases the chance an agent may execute shell/network actions without clear sandboxing or least-privilege controls, which is risky for a skill that sends user-supplied identifiers and bearer-authenticated requests to an external API.
The skill instructs the agent to transmit data and an authorization bearer token to an external third-party service. External transmission is expected for an API-integration skill, but it remains security-relevant because user-provided item IDs and potentially sensitive business-query patterns are sent off-platform, and the skill provides shell commands that could expose the token through unsafe execution environments, logs, or process history.
单个商品：
curl -s -X POST "https://www.clawec.com/api/aigc/ec/ozon/data/product/detail" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $CLAWEC_API_KEY" \
-d '{"itemIds":"123456789","period":"TWENTY_EIGHT_DAY"}'
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print(json.dumps(body))
' "$ITEM_IDS" "$PERIOD" "$SORT_FIELD" "$SORT_DIRECTION" "$UPDATE_PERIOD")
curl -s -X POST "https://www.clawec.com/api/aigc/ec/ozon/data/product/detail" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $API_KEY" \
-d "$PAYLOAD"
This shell script sends user-supplied item IDs to an external HTTPS endpoint and authenticates with a sensitive environment variable. There is no confirmation prompt, logging, comment, or other user-facing disclosure in the file warning that data will be transmitted off-system using the provided API key.
The markdown states '默认中文报告', which sets a language preference for responses without indicating user opt-in or an available language choice. This is a natural-language policy concern because the skill appears to impose a locale/output language by default rather than adapting to the user's preference.
Line L098 states that itemTitle is Russian and instructs implementers to preserve and display the original text. This is a natural-language locale constraint presented as a requirement, with no indication that users may choose another language or that the behavior is optional.
The usage and error strings are written only in Chinese, which imposes a specific language on all users without opt-in or documented locale scope. This matches the policy concern for language or locale restrictions expressed in natural-language content within code.