ClawHub
Back to skill

Security audit

Bring

Security checks across malware telemetry and agentic risk

Overview

The skill appears to manage Bring shopping lists as claimed, but it stores a Bring password and reusable auth tokens locally in plaintext.

Install only if you are comfortable giving this skill Bring account access and storing Bring credentials under ~/.openclaw/bring. Avoid using it on shared machines, consider a unique Bring password, restrict access to the config and token files, and remove those files when you stop using the skill.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
97% confidence
Finding
The CLI stores the user's Bring email/password in config.json and bearer/refresh tokens in token.json under the user's home directory in plaintext. For a shopping-list skill, persistent local storage of reusable credentials and session tokens materially increases exposure to credential theft from local compromise, backups, logs, or other processes reading those files.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The setup flow instructs users to provide raw email and password on the command line while also noting that credentials and tokens are stored locally, but it does not prominently warn about those risks or describe file protections. Command-line credentials may be exposed through shell history, process inspection, logs, or insecure local storage, creating a realistic path to account compromise for a shared grocery account that may reveal household information and permit unauthorized list changes.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The configure command writes the supplied email and password directly to a local JSON file without warning the user that secrets will be persisted. This is dangerous because users may assume credentials are used only for the current session, while plaintext storage creates a recoverable secret that can be exfiltrated by malware, other local users, or accidental file syncing.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The script caches UUID, bearer token, and refresh token to disk and silently reuses them on later runs. Because these tokens can grant continued access to shared shopping lists, storing them without explicit disclosure or protection creates an avoidable account/session hijacking risk if the local filesystem is accessed.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.