ClawHub
Back to skill

Security audit

Extract

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Tavily web-extraction skill; the main caution is that submitted URLs and query text are sent to Tavily.

Use this only for URLs and query text you are comfortable sending to Tavily. Avoid private dashboards, signed URLs, internal endpoints, regulated data, secrets in URLs, or confidential research targets unless your organization approves that third-party processing. Keep the Tavily API key private and out of shared logs, prompts, and repositories.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill is explicitly designed to send user-provided URLs and optional query text to Tavily's external extraction API, but it does not warn users that their inputs and fetched target URLs will be disclosed to a third party. This can lead to unintended sharing of sensitive URLs, internal links, research topics, or proprietary query context, especially if users assume the extraction happens locally.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The script sends user-provided URLs and related query data directly to Tavily's external API without any explicit runtime disclosure, confirmation, or guardrails about third-party transmission. In a skill context, users may supply sensitive internal URLs, tokens embedded in URLs, or proprietary queries, so silent exfiltration to an external service creates a real confidentiality risk even if this is the intended product behavior.

External Transmission

Medium
Category
Data Exfiltration
Content
exit 1
fi

curl -s --request POST \
    --url https://api.tavily.com/extract \
    --header "Authorization: Bearer $TAVILY_API_KEY" \
    --header 'Content-Type: application/json' \
Confidence
91% confidence
Finding
curl -s --request POST \ --url https://api.tavily.com/extract \ --header "Authorization: Bearer $TAVILY_API_KEY" \ --header 'Content-Type: application/json' \ --header 'x-client-source

VirusTotal

No VirusTotal findings

View on VirusTotal