ClawHub
Back to skill

Security audit

极鲸云 Temu 店铺搜索

Security checks across malware telemetry and agentic risk

Overview

The skill’s Temu shop-search behavior is coherent, but it persists and shares GeekBI login state more broadly than a shop-search skill needs.

Install only if you trust GeekBI with your Temu research queries and accept that GeekBI login state may be reused by other GeekBI Temu skills. Prefer using a virtual environment and a dedicated workspace, and clear the GeekBI auth state when you no longer want the skill to reuse that session.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill directs the agent to read local files, invoke shell commands, and access a remote service, yet it declares no permissions or equivalent user-visible capability notice. This creates a transparency and control gap: users may not realize the skill can modify execution flow, inspect local resources, or make networked requests, which increases the risk of unintended data exposure or unsafe command execution in the host environment.

Context-Inappropriate Capability

Medium
Confidence
88% confidence
Finding
The document explicitly directs all Geekbi Temu skills to share a common authentication state and to persist credential material in multiple shared locations. This creates unnecessary cross-skill trust and broadens the blast radius: compromise or misuse in one skill can expose or reuse authentication for another, which exceeds least-privilege expectations for a shop-search capability.

Missing User Warnings

Low
Confidence
95% confidence
Finding
The skill instructs running pip install directly in the local environment without prior confirmation, isolation, or warning about side effects. Installing dependencies can alter the host environment, execute package installation hooks, and introduce supply-chain risk if package sources or versions are not pinned and reviewed.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.