ClawHub
Back to skill

Security audit

Tmp.JO43v0Z5UV

Security checks across malware telemetry and agentic risk

Overview

This Etix search skill is clearly described and uses a browser-session bridge for Etix data, with no evidence of hidden, destructive, or unrelated behavior.

Install only if you want Etix-related searches to use an MCP server plus a browser extension connected to your etix.com tab. Review the fetchproxy extension and npm package source before use, and avoid invoking the skill when you do not want your active Etix browser session involved.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger description is broad enough to match many generic requests involving events, venues, performers, or showtimes, which can cause the skill to activate when the user did not explicitly intend to use Etix. In this skill, unintended invocation is more concerning because execution depends on routing requests through the user's browser session and extension, increasing the chance of unnecessary session-mediated requests to etix.com.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.