ClawHub
Back to skill

Security audit

Generate Instagram marketing content from product URLs. Extract product information and create engaging Instagram posts with image suggestions, captions, and hashtags optimized for engagement. Use when user provides a product URL from e-commerce sites like Amazon, Shopify, Taobao, etc. and wants Instagram marketing content such as Image/text post ideas, engaging captions with CTAs, hashtag strategy, or Story/reels content suggestions.

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it claims: fetch a user-provided product page and turn the extracted details into Instagram marketing content.

Use this skill only with public product pages you are comfortable fetching from your environment. Avoid internal, admin, cart, private, or token-bearing URLs, and review generated marketing copy for factual accuracy and platform or advertising compliance before posting.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
82% confidence
Finding
The skill instructs the agent to fetch arbitrary product URLs via `scripts/extract_product.py`, which implies network access despite no declared permissions. Hidden or undeclared network capability weakens policy enforcement and can enable server-side request forgery, unintended external requests, or data exfiltration if a user supplies attacker-controlled URLs.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script performs a server-side HTTP GET to an arbitrary user-supplied URL without any validation, allowlisting, or explicit disclosure that network access will occur. In an agent/skill context, this creates SSRF-style risk and can be abused to access internal services, cloud metadata endpoints, or other unintended network targets if the runtime has network reachability.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.