ClawHub
Back to skill

Security audit

Bring Add

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it says: use disclosed Bring! account credentials to add user-requested items to shopping lists.

Install only in a trusted local environment. Treat BRING_EMAIL and BRING_PASSWORD as secrets, prefer a password manager or short-lived local environment setup, avoid putting them in shared shell history, scripts, CI logs, or committed files, and review/pin dependencies if you need reproducible installs. Use --dry-run and --list to confirm the target shopping list before making changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (6)

Description-Behavior Mismatch

Low
Confidence
93% confidence
Finding
The skill exposes a `lists` subcommand that enumerates all Bring! shopping lists, including names and optionally UUIDs, even though the stated skill scope is add-only. This broadens the accessible data surface and can leak account metadata to a caller or downstream agent that should only be able to add items, violating least-privilege expectations.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The documentation instructs users to export BRING_EMAIL and BRING_PASSWORD in plaintext without any warning about shell history, process environment exposure, shared terminals, or CI/log leakage. While common in CLI examples, this can lead to accidental credential disclosure and compromise of the user's Bring! account, especially in multi-user systems or recorded shell sessions.

Vague Triggers

Low
Confidence
91% confidence
Finding
The dependency "bring-shopping": "*" allows any version of the linked skill dependency to satisfy resolution, which weakens supply-chain integrity and makes builds less reproducible. In this skill context, the dependency is especially sensitive because it is the core package used to modify shopping lists; an unexpected or tampered version could change behavior, exfiltrate data, or perform unintended actions without an explicit version change in this manifest.

Unpinned Dependencies

Low
Category
Supply Chain
Content
],
  "license": "MIT",
  "dependencies": {
    "bring-shopping": "*",
    "chalk": "^4.1.2",
    "commander": "^11.1.0"
  },
Confidence
99% confidence
Finding
"bring-shopping": "*"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"license": "MIT",
  "dependencies": {
    "bring-shopping": "*",
    "chalk": "^4.1.2",
    "commander": "^11.1.0"
  },
  "engines": {
Confidence
86% confidence
Finding
"chalk": "^4.1.2"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"dependencies": {
    "bring-shopping": "*",
    "chalk": "^4.1.2",
    "commander": "^11.1.0"
  },
  "engines": {
    "node": ">=18.0.0"
Confidence
87% confidence
Finding
"commander": "^11.1.0"

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.