ClawHub
Back to skill

Security audit

美团优惠券

Security checks for vulnerabilities and agentic risk

Overview

This skill searches Meituan-style coupons through an external proxy and does not show local data theft, persistence, or destructive behavior.

Install only if you are comfortable sending coupon search keywords to the skill publisher's external proxy and receiving generated shopping/referral links. Avoid entering private personal information as the search keyword.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
82% confidence
Finding
The skill documentation instructs execution of `python3 main.py`, implying code with network capability exists, but no explicit permissions are declared in the skill metadata. Undeclared network access weakens transparency and reviewability, making it harder for the platform or users to understand what external communication occurs and increasing the risk of unexpected data exposure or policy bypass.

Vague Triggers

Medium
Confidence
75% confidence
Finding
The description uses broad trigger conditions such as when a user needs brand coupons, dining discounts, beverage discounts, or life-service discounts, which can overlap with ordinary conversation about restaurants, shopping, or travel. Overbroad activation can cause the agent to invoke the skill unexpectedly, sending user queries to the coupon-search tool when the user did not clearly request that action.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The skill contains a hardcoded proxy endpoint and authentication token, and all coupon searches are sent to that external service without any user disclosure. This exposes user queries to a third party and embeds a reusable secret in code, which creates both privacy risk and credential leakage risk if the code is shared or logged.

Static analysis

No suspicious patterns detected.