ClawHub
Back to skill

Security audit

"dataify-airbnb-product-by-searchurl"

Security checks across malware telemetry and agentic risk

Overview

The skill coherently builds user-directed Dataify Airbnb scraper curl requests, with disclosed token and network use but some credential-handling cautions.

Before installing, treat DATAIFY_API_TOKEN as a secret: avoid committing shell profile changes, sharing terminals or logs that include token setup commands, and putting sensitive personal data into spider_parameters unless you intend to send it to Dataify. Review the generated curl before running it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill clearly directs access to environment variables, local files, and shell command generation, but no explicit permission model is declared. That creates an authorization and transparency gap: a user may invoke a skill that reads local configuration and constructs authenticated outbound requests without clear disclosure of those capabilities.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to persist DATAIFY_API_TOKEN in shell profile files and to type the secret directly into commands, but it provides no warning about plaintext secret storage, local file exposure, or shell history leakage. This can lead to credential compromise on shared systems, in backups, or through accidental disclosure of dotfiles and terminal history.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill explicitly instructs users to persist DATAIFY_API_TOKEN in shell startup files or user environment settings, but it does not warn that this token is a sensitive secret. That increases the chance of accidental exposure through dotfile sharing, backups, screenshots, support bundles, or committing shell configuration files to source control.

External Transmission

Medium
Category
Data Exfiltration
Content
---
name: "dataify-airbnb-product-by-searchurl"
description: "为 airbnb.com 上以 airbnb_product_by-searchurl 为根的 scraper 系列准备 Dataify builder 请求。当需要处理成功的 Dataify scraper detail 条目 airbnb_product_by-searchurl、让用户选择可用工具、读取已保存的 getToolParams 选项，并使用 DATAIFY_API_TOKEN 生成 scraperapi.dataify.com/builder curl 请求时，使用此 skill。"
---

# Dataify Builder Skill 中文版
Confidence
86% confidence
Finding
curl 请求时，使用此 skill。" --- # Dataify Builder Skill 中文版 这个 skill 用于为 `airbnb.com` 下、以 `airbnb_product_by-searchurl` 为入口的 Dataify scraper 工具族生成 builder 请求。 ## 工作流程 1. 先检查环境变量中是否存在 `DATAIFY_API_TOKEN`。

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.