ClawHub
Back to skill

Security audit

Clovercli

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate Clover POS CLI skill, but it needs review because it handles sensitive merchant data and credentials with insufficient safety guidance.

Install only if you trust the external @versatly/clovercli package and intend to give it access to your Clover merchant account. Use the least-privileged token available, avoid storing long-lived tokens in shell startup files, protect exported reports, review create/delete/raw API commands before running them, and treat the embedded known-client merchant ID as real customer data that should not be copied into your own materials.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
96% confidence
Finding
The documentation includes a specific merchant identifier alongside personal contextual notes about an identifiable individual and business. Even if the merchant ID is not a secret credential by itself, publishing real customer identifiers and unnecessary personal details can expose third-party data, enable targeting, and indicate weak data-handling practices.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill instructs users to export a long-lived access token and shows data export commands, but provides no warning that these values and outputs may contain sensitive business or customer information. In a CLI context for payments, orders, customers, and employees, this omission increases the risk of credential leakage through shell history, shared profiles, logs, and insecure handling of exported files.

Session Persistence

Medium
Category
Rogue Agent
Content
git clone https://github.com/Versatly/clovercli.git
cd clovercli && npm install && npm run build

# Set credentials (add to ~/.bashrc)
export CLOVER_ACCESS_TOKEN="your-token"
export CLOVER_MERCHANT_ID="your-merchant-id"
Confidence
88% confidence
Finding
add to ~/.bashrc

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.