Security audit
clawec-shopee-word-ranking
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward helper for querying Shopee keyword ranking data through the disclosed ClawEC API.
Before installing, be aware that queries and the API key are used with ClawEC's external API. Keep the key in the CLAWEC_API_KEY environment variable, do not hardcode it, and use the skill only for keyword-ranking lookups you are comfortable sending to that provider.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.