Security audit
clawec-ozon-product-traffic-keywords
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward ClawEC API helper for querying Ozon product keyword metrics, with no hidden persistence or unrelated behavior found.
Before installing, be aware that queries are sent to ClawEC and require a CLAWEC_API_KEY. Use it only if you are comfortable sharing the queried Ozon product IDs and keyword filters with that service, and keep the API key in an environment variable rather than hard-coding it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.
