ClawHub
Back to skill

Security audit

Dataify Google Jobs

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Google Jobs API connector that asks for confirmation before sending job search parameters to Dataify.

Install only if you are comfortable sending the confirmed job search parameters and your Dataify API token to Dataify. Check the preview table before confirming a call, and avoid pasting unrelated sensitive data into job search fields.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
96% confidence
Finding
The skill instructs the agent to read environment state for `DATAIFY_API_TOKEN`, read local reference files and scripts, and make outbound network requests, yet no permissions are declared. That creates a capability/consent mismatch: the runtime or reviewer may not realize the skill can access secrets and exfiltrate user-provided or environment-backed data to an external API.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger condition is overly broad because it activates not only on explicit requests to call Google Jobs, but also when the user 'specifies the job search fields.' In practice, that can cause the skill to intercept ordinary conversation about jobs and route it into a networked workflow that may collect parameters, use tokens, and send data to a third party without the user clearly intending to invoke this integration.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.secret_argv_exposure

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
SKILL.md:63

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
SKILL.zh-CN.md:64