ClawHub
Back to skill

Security audit

Dataify Amazon Seller

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a disclosed Dataify integration that submits Amazon seller collection tasks, with some credential-handling cautions but no evidence of hidden or malicious behavior.

Install only if you intend to use Dataify for Amazon seller URL collection. Treat DATAIFY_API_TOKEN as a sensitive credential, prefer session-scoped storage when possible, and review the URL and file_name confirmation before allowing submission because Dataify account usage may be affected.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill explicitly uses environment variables and makes outbound network requests to a third-party API, but no declared permissions are present. That mismatch weakens user and platform visibility into sensitive capabilities, especially because the skill handles API tokens and external submission of user-supplied URLs.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill tells users to store a long-lived API token persistently at user scope without warning that local environment variables may be readable by other local processes, exposed in support dumps, or inherited by spawned shells. Because this token authorizes third-party API usage, accidental disclosure could enable unauthorized task creation, billing abuse, or access to account-linked scraping activity.

Vague Triggers

Medium
Confidence
88% confidence
Finding
The trigger conditions are broad and loosely bounded, covering multiple phrasings of Amazon seller collection/scraping requests without clear narrowing logic. This can cause the skill to activate in unrelated contexts and initiate credential handling or external task submission flows when the user did not specifically intend to use this integration.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs the agent to check for and reuse a locally saved DATAIFY_API_TOKEN, but it does not require clear user notice or consent before accessing that local credential. In a broad-trigger skill, this increases the risk of silent credential use and unintended transmission of a secret to a third-party service.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.