Security audit

Zyte API

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Zyte API scraping integration, but users should understand it installs and authorizes the ClawLink plugin to route scraping requests through external services using connected credentials.

Install this only if you intend to use ClawLink and Zyte API from OpenClaw. Review the plugin trust boundary, connected Zyte account permissions, quota or billing impact, and avoid submitting confidential or internal URLs unless your organization approves that routing through ClawLink and Zyte.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:48
Finding: Unpinned Third-Party Plugin Is Trusted with Credentials and Remote Tool Execution
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 82% confidence
Finding: The description says to use the skill when users want to "extract data at scale" or "monitor website content," but it does not define explicit trigger phrases, boundaries, or exclusion conditions. In a manifest/markdown context, this can cause the skill to activate for generic website-related requests that may not specifically require Zyte API scraping.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The skill encourages users to use hosted credentials and third-party scraping/account tools but does not clearly disclose that requested URLs, extraction targets, and account or usage queries will be sent to ClawLink and Zyte services. This creates a transparency and privacy risk because users may unknowingly submit sensitive internal URLs, target lists, or account metadata to external providers.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The skill states that all extraction operations require explicit user confirmation for high-volume or repeated scraping, but elsewhere classifies extraction tools as read operations that can be executed directly. This inconsistency can cause an agent to perform costly or policy-sensitive scraping without the additional confirmation the user was led to expect, increasing the risk of unauthorized third-party requests and spend.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.