ClawHub
Back to skill

Security audit

Dataify Google Maps Reviews

Security checks across malware telemetry and agentic risk

Overview

This skill appears to create Dataify Google Maps review collection tasks as advertised, with disclosed token use and external API calls.

Install only if you are comfortable sending Google Maps URLs and collection parameters to Dataify. Use a scoped Dataify API token where possible, do not paste tokens into shared logs or shell history, and avoid permanent environment-variable storage on shared machines.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill instructs the agent to access environment variables for `DATAIFY_API_TOKEN` and make outbound network requests to a third-party API, but the skill declares no corresponding permissions. This creates a hidden capability gap: an operator or user may not realize the skill can read local secrets and transmit user-supplied data externally, increasing the risk of unintended secret exposure or policy bypass.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger description is overly broad and includes generic English verbs like gather, fetch, extract, and collect combined with Google Maps review/comment concepts. This can cause the skill to activate on loosely related user requests, increasing the chance of unintended scraping flows, unnecessary credential prompting, or execution of external-data collection actions the user did not clearly authorize.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs the agent to read and use a long-lived API token from environment storage without warning about credential handling, shell history exposure, shared-machine risk, or least-privilege practices. In an agent context, encouraging persistent secret reuse raises the chance of accidental disclosure, misuse across sessions, or unsafe prompting for sensitive values.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.secret_argv_exposure

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
SKILL.md:50