ClawHub
Back to skill

Security audit

Apollo

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Apollo.io integration that uses Maton authentication and includes clear safeguards for credentials and write actions.

Before installing, confirm you are comfortable giving Maton-mediated access to Apollo sales data. Prefer OAuth, verify the active profile and connection, use a specific connection when multiple accounts exist, and require explicit confirmation before creating, updating, deleting, messaging, or enrolling contacts in sequences.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Intent-Code Divergence

Medium
Confidence
91% confidence
Finding
The SDK section states that `maton login` does not carry over and that the SDK uses a separate session store, which conflicts with earlier guidance centered on the CLI-managed OAuth/session model. This inconsistency can cause an agent or operator to re-authenticate through a different path, fall back to API-key usage, or mishandle credentials, increasing the chance of secret exposure or use of the wrong account/session.

VirusTotal

51/51 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.