ClawHub
Back to skill

Security audit

Skill

Security checks across malware telemetry and agentic risk

Overview

This skill is a purpose-aligned HTM account helper, but users should understand it uses their HTM credentials and an unofficial order API before installing.

Install only if you are comfortable giving the skill HTM account credentials for an account you own or are authorized to manage. Treat HTM_LOGIN and HTM_PASSWORD as secrets, use a secure environment, and remember that reorder can change your HTM shopping cart even though payment still happens manually in the browser.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
98% confidence
Finding
The skill embeds a hardcoded internal `X-API-Key` used to access HTM order endpoints beyond ordinary cookie-authenticated portal access. Even if the key was exposed in HTM's frontend, reusing and redistributing it in a third-party automation skill normalizes access to internal order APIs and enables scripted cart/order manipulation if a user session is present, increasing abuse potential and creating legal and security risk.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill explicitly requires HTM_LOGIN and HTM_PASSWORD but provides no privacy, storage, or handling guidance for those credentials. Because the skill interacts with a real user account and transit purchase workflow, unclear credential handling increases the risk of accidental disclosure, unsafe logging, or reuse of sensitive account secrets in insecure environments.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
htm.mjs:145