ClawHub
Back to skill

Security audit

拼多多百亿补贴

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed shopping search helper that sends product search filters to a cloud proxy and returns product listings, with no evidence of hidden persistence, local data access, purchasing, or destructive behavior.

Install only if you are comfortable with shopping queries and filter values being sent to the publisher's cloud proxy. Do not treat the returned product links or prices as independently verified, and avoid entering sensitive personal information because the tool is only designed for product browsing.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Tainted flow: 'req' from os.environ.get (line 18, credential/environment) → urllib.request.urlopen (network output)

Critical
Category
Data Flow
Content
headers={"Content-Type": "application/json", "X-Proxy-Token": PROXY_TOKEN},
    )
    try:
        with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:
            return json.loads(resp.read().decode("utf-8"))
    except urllib.error.HTTPError as e:
        err = ""
Confidence
96% confidence
Finding
with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill declares environment-backed proxy access and implicitly relies on network connectivity, but does not declare corresponding permissions or clearly scope what external communication occurs. This creates a transparency and governance gap: the skill can transmit user queries to a remote proxy/API path without users or the hosting platform having an explicit permission boundary to review or enforce.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill forwards user-supplied search terms and filters to a remote proxy service, but the code provides no disclosure, consent mechanism, or minimization of transmitted data. In a consumer shopping skill this creates a privacy risk because user queries and preferences are silently sent to a third-party endpoint outside the local execution context.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.