ClawHub
Back to skill

Security audit

Walmart Product Reviews

Security checks across malware telemetry and agentic risk

Overview

The skill is a Walmart review scraper, but it explicitly recommends stealth browser sessions to work around rate limits, which needs user review before installation.

Install only if you are comfortable with a scraper that may encourage anti-detection browsing. Use it for user-directed, permitted review collection, avoid stealth or fingerprint-spreading tactics, respect Walmart's terms and rate limits, and approve any local scripts or output files before the agent creates them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The instruction to use multiple stealth browser sessions with independent fingerprints to increase throughput and avoid rate limits moves beyond ordinary browser automation into anti-detection evasion. That guidance can facilitate large-scale scraping in a way that bypasses platform protections and materially increases abuse potential.

Intent-Code Divergence

High
Confidence
98% confidence
Finding
The skill claims it only reads data already visible and never bypasses controls, yet later recommends stealth sessions to work around anti-scraping restrictions. This contradiction is dangerous because it masks evasive collection behavior behind a benign description, making misuse easier to approve or overlook.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill instructs the agent to create batch scripts and append to a local memory file without clear user notice or consent. Unannounced filesystem modification is risky because it creates persistent artifacts, can overwrite or pollute the working directory, and may leak operational history across tasks.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.