ClawHub
Back to skill

Security audit

Ecommerce Dropshipping Product Research

Security checks for vulnerabilities and agentic risk

Overview

This skill is a local dropshipping product-scoring helper with no evidence of credential use, network access, persistence, or destructive behavior.

Install this if you want a structured heuristic checklist for dropshipping product ideas. Treat its scores as planning guidance, not live market research or financial advice, and independently verify demand, supplier cost, shipping, ad performance, and compliance before spending money.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
85% confidence
Finding
The trigger list includes broad phrases such as "product idea" and potentially ambiguous terms like "go test reject," which can cause the skill to activate for unrelated user requests. Over-broad activation can route users into the wrong workflow, creating prompt-scope confusion and increasing the chance of inappropriate or misleading outputs in contexts not intended for dropshipping analysis.

Static analysis

No suspicious patterns detected.