ClawHub
Back to skill

Security audit

Tmp.WxOUxqfEUL

Security checks across malware telemetry and agentic risk

Overview

The skill is disclosed as an easyTable shell workflow, but it includes live booking changes and instructions to copy a browser anti-bot token into scripted requests.

Review this carefully before installing. Use it only if you are comfortable letting fpx/Transporter act through your easyTable browser session, and do not run create, modify, or cancel commands unless you have verified the restaurant, phone number, booking id, party size, date, and time. Prefer the normal easyTable website or an approved API for booking writes, and avoid copying anti-bot tokens from DevTools.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
95% confidence
Finding
The documented skill scope is availability lookup and cancellation, but this section adds booking creation and modification workflows, expanding capabilities into higher-risk state-changing actions. That scope creep is dangerous because it enables actions involving personal data and live reservations, including use of anti-bot tokens, without corresponding guardrails, consent checks, or clear user-facing warnings.

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
The instructions tell the operator to extract a live Cloudflare Turnstile token from the browser DevTools and replay it into an API request. This is dangerous because it teaches bypass or circumvention of an anti-automation control tied to an authenticated browser session, enabling unauthorized scripted booking operations outside the normal user flow.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The cancellation endpoint is a destructive action that affects real bookings, yet the documentation presents it as a straightforward GET without prominent warning, confirmation, or discussion of irreversible consequences. In a shell-oriented skill, this increases the chance of accidental or scripted misuse, especially when combined with phone-number-based lookup of bookings.

Ssd 3

High
Confidence
98% confidence
Finding
This section explicitly instructs retrieval and reuse of a Turnstile token from a live signed-in browser session, which amounts to operational guidance for replaying a session-bound anti-bot artifact. In the context of a shell skill for restaurant bookings, that materially increases abuse potential by bridging an authenticated browser context into scripted write operations that the CLI otherwise cannot perform.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.