ClawHub
Back to skill

Security audit

web-data-extractor（网页数据采集器，支持 CSS/XPath 选择器、批量抓取、自动分页、数据导出（CSV/JSON）。 适用于市场调研、竞品分析、内容聚合。）

Security checks across malware telemetry and agentic risk

Overview

The skill is mostly a normal web scraping/export helper, but it requests unexplained local command execution access.

Review before installing. Prefer installing only if exec can be denied or removed, or if the publisher documents a specific command-execution need. Use it only on sites you are authorized to scrape, keep page counts and concurrency conservative, and check output filenames and locations before writing files.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
95% confidence
Finding
The manifest grants the skill an 'exec' capability even though its stated purpose is limited to web scraping, selector extraction, pagination, and data export. Unnecessary command execution materially expands the attack surface: if the skill is invoked or compromised, it could run arbitrary local commands, access sensitive host resources, or chain from fetched web content into system-level actions.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The trigger list contains broad phrases such as 'web scraping', 'data extraction', and related generic terms that may cause the skill to activate for a wide range of ordinary user requests without clear boundaries. Over-broad activation increases the chance the skill handles requests outside its intended scope, which is more concerning here because the skill also declares powerful capabilities including web access, file write, and exec.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.