ClawHub
Back to skill

Security audit

Shopee-选品决策专家 | 青虎AI

Security checks for vulnerabilities and agentic risk

Overview

The skill coherently produces paid Shopee market reports through Qinghu APIs, with a disclosed but noteworthy default to save larger data tables locally.

Before installing, be aware that this skill may use a Qinghu API key, spend Qinghu credits after your approval, call Qinghu's external API, and create local spreadsheet-style exports for larger result sets. Review where exported files are stored if the report contains sensitive business research.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs automatic export of result sets to files by default, including use of cached local file paths, without first obtaining explicit user consent or clearly warning that data will be written to local storage. This can expose potentially sensitive business data through unintended persistence, broader access by other tools/processes, or accidental sharing via generated links.

Static analysis

No suspicious patterns detected.