ClawHub
Back to skill

Security audit

拼多多实时热销榜

Security checks across malware telemetry and agentic risk

Overview

This shopping ranking skill sends search filters to a disclosed cloud proxy to retrieve Pinduoduo product data and shows no evidence of local data access, persistence, or destructive behavior.

Install only if you are comfortable with product search terms and filters being sent to the configured cloud proxy. Avoid entering sensitive personal information as search keywords, and prefer the default endpoint unless you intentionally trust a replacement proxy.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Tainted flow: 'req' from os.environ.get (line 18, credential/environment) → urllib.request.urlopen (network output)

Critical
Category
Data Flow
Content
headers={"Content-Type": "application/json", "X-Proxy-Token": PROXY_TOKEN},
    )
    try:
        with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:
            return json.loads(resp.read().decode("utf-8"))
    except urllib.error.HTTPError as e:
        err = ""
Confidence
95% confidence
Finding
with urllib.request.urlopen(req, timeout=TIMEOUT) as resp:

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The skill forwards user query data such as keyword, price filters, and brand filters to a remote proxy service, but the code provides no user-facing notice, consent, or transparency about that transmission. While not code execution, it creates a privacy and data-handling risk because user inputs are sent to a third-party endpoint outside the local skill boundary.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.