Security audit

jp-company-verify

Security checks for vulnerabilities and agentic risk

Overview

ClawScan rates this skill benign with medium overall confidence: the reports show a company verification skill whose documented external API use fits its purpose, though some reference checks were incomplete.

The verdict is benign, not risk-free. The skill documentation describes sending company information to an external API and refers to API keys and paid calls. Review the provider and the information you plan to send before installing. Coverage was partial: some references could not be resolved, so the evidence is incomplete.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (38)

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.
md
1. **API key (recommended).** If the environment has `JPVERIFY_API_KEY` (a `jpv_live_…` key the user created), send it on every call: - HTTP: header `Authorization: Bearer $JPVERIFY_API_KEY` (or `X-API-Key`). - MCP: if the JPVerify Claude Code plugin is installed, the `jpverify` MCP server is already configured and uses the key saved in the plugin's settings (`/plugin` → JPVerify → Configure), not `JPVERIFY_API_KEY`. Otherwise: `claude mcp add --transport http jpverify https://api.jpverify.com/mcp --header "Authorization: Bearer $JPVERIFY_API_KEY" --header "X-JPVerify-Client: jp-company-verify/1.3.0"` Each successful call is deducted from the user's prepaid USD credits; failed or invalid calls are refunded automatically. Before a large batch, check the balance for free: `GET https://api.jpverify.com/v1/account/balance` with the same header, or the MCP tool `jpverify_balance`. 2. **x402 wallet.** If you have an x402 client with USDC on Base (`eip155:8453`) and the user approve

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.
md
r is already configured and uses the key saved in the plugin's settings (`/plugin` → JPVerify → Configure), not `JPVERIFY_API_KEY`. Otherwise: `claude mcp add --transport http jpverify https://api.jpverify.com/mcp --header "Authorization: Bearer $JPVERIFY_API_KEY" --header "X-JPVerify-Client: jp-company-verify/1.3.0"` Each successful call is deducted from the user's prepaid USD credits; failed or invalid calls are refunded automatically. Before a large batch, check the balance for free: `GET https://api.jpverify.com/v1/account/balance` with the same header, or the MCP tool `jpverify_balance`. 2. **x402 wallet.** If you have an x402 client with USDC on Base (`eip155:8453`) and the user approved a budget, call without a key: the API answers HTTP 402 with the exact price; sign and retry with `PAYMENT-SIGNATURE`. Pay only within the approved budget. 3. **Neither.** Do not pay and do not invent a key. The MCP server also works without a key for the free tool `jpverify_guide` (`claude mcp

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.
md
user's prepaid USD credits; failed or invalid calls are refunded automatically. Before a large batch, check the balance for free: `GET https://api.jpverify.com/v1/account/balance` with the same header, or the MCP tool `jpverify_balance`. 2. **x402 wallet.** If you have an x402 client with USDC on Base (`eip155:8453`) and the user approved a budget, call without a key: the API answers HTTP 402 with the exact price; sign and retry with `PAYMENT-SIGNATURE`. Pay only within the approved budget. 3. **Neither.** Do not pay and do not invent a key. The MCP server also works without a key for the free tool `jpverify_guide` (`claude mcp add --transport http jpverify https://api.jpverify.com/mcp`); use it to confirm which call fits, then tell the user they can create a free account with starter credit at https://www.jpverify.com/signup?ref=jp-company-verify and set `JPVERIFY_API_KEY`. Always send `X-JPVerify-Client: jp-company-verify/1.3.0` on HTTP calls. Never print, log or share the API key.

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 108)May include surrounding context.
API key:

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 119)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"}, json={"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 132)May include surrounding context.
bash
# No key: shows the HTTP 402 x402 price; pay with an x402 client and retry with PAYMENT-SIGNATURE. curl -i -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ -H "Content-Type: application/json" \ -d '{"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"}'

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 108)May include surrounding context.
API key:

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 70% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.
python
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 60% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 118)May include surrounding context.
python
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 138)May include surrounding context.
-d '{"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"}'

text
Full SDK examples (Python `x402`, JavaScript `@x402/fetch`): https://api.jpverify.com/docs/x402 ## Limits and privacy / 制限とプライバシー

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 145)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 145)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 145)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 145)May include surrounding context.
md
- Results are a **public-registry pre-check** with the source and as-of date of the data. They are not KYB, AML or sanctions screening, and not legal, tax or accounting advice. A "not found" does not mean the entity does not exist or is risky. - If `manual_review_required` is true or a status is ambiguous, show the evidence to the user and let them decide; do not decide on their behalf. - Only send data the user is entitled to process. JPVerify takes fields, not files; do not send personal details (names, phone numbers, e-mail addresses) that a check does not need. - Docs: API key https://api.jpverify.com/docs/api-key · x402 https://api.jpverify.com/docs/x402 · terms https://api.jpverify.com/en/terms · privacy https://api.jpverify.com/en/privacy

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 3)May include surrounding context.
md
# jp-company-verify — request examples Set `JPVERIFY_API_KEY` (create one at https://www.jpverify.com/signup?ref=jp-company-verify). Without a key the API answers HTTP 402 with the x402 price; see https://api.jpverify.com/docs/x402 for x402 SDK code. ## `POST /v1/jp/companies/resolve` — $0.25

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 8)May include surrounding context.
POST /v1/jp/companies/resolve — $0.25

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/resolve \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 19)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/resolve", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"}, json={"name": "Murata Manufacturing Co., Ltd.", "prefecture": "Kyoto"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 31)May include surrounding context.
POST /v1/jp/companies/verify — $0.01

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/verify \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 42)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/verify", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"}, json={"name": "トヨタ自動車株式会社", "response_language": "both"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 54)May include surrounding context.
POST /v1/jp/companies/report — $0.10

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/report \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 65)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/report", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"}, json={"name": "株式会社ABC", "response_language": "both"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 77)May include surrounding context.
POST /v1/jp/companies/verify-batch — $0.008 per item

bash
curl -X POST https://api.jpverify.com/v1/jp/companies/verify-batch \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ -H "Content-Type: application/json" \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 88)May include surrounding context.
md
import os, requests response = requests.post( "https://api.jpverify.com/v1/jp/companies/verify-batch", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"}, json={"items": [{"corporate_number": "1180301018771"}], "response_language": "both"},

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 100)May include surrounding context.
GET /v1/jp/filings — $0.01

bash
curl -G https://api.jpverify.com/v1/jp/filings \ -H "Authorization: Bearer $JPVERIFY_API_KEY" \ -H "X-JPVerify-Client: jp-company-verify/1.3.0" \ --data-urlencode 'edinet_code=E00000' \

External Transmission

Medium

Category: Data Exfiltration
Confidence: 50% confidence
Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Content: Scanner excerpt · references/examples.md (reported line 112)May include surrounding context.
md
import os, requests response = requests.get( "https://api.jpverify.com/v1/jp/filings", headers={"Authorization": f"Bearer {os.environ['JPVERIFY_API_KEY']}", "X-JPVerify-Client": "jp-company-verify/1.3.0"}, params={"edinet_code": "E00000", "limit": 20, "response_language": "en"},

jp-company-verify

Overview

A.I.G

SkillSpector

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

`POST /v1/jp/companies/resolve` — $0.25

External Transmission

External Transmission

`POST /v1/jp/companies/verify` — $0.01

External Transmission

External Transmission

`POST /v1/jp/companies/report` — $0.10

External Transmission

External Transmission

`POST /v1/jp/companies/verify-batch` — $0.008 per item

External Transmission

External Transmission

`GET /v1/jp/filings` — $0.01

External Transmission

Overview

A.I.G

SkillSpector

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

External Transmission

POST /v1/jp/companies/resolve — $0.25

External Transmission

External Transmission

POST /v1/jp/companies/verify — $0.01

External Transmission

External Transmission

POST /v1/jp/companies/report — $0.10

External Transmission

External Transmission

POST /v1/jp/companies/verify-batch — $0.008 per item

External Transmission

External Transmission

GET /v1/jp/filings — $0.01

External Transmission

`POST /v1/jp/companies/resolve` — $0.25

`POST /v1/jp/companies/verify` — $0.01

`POST /v1/jp/companies/report` — $0.10

`POST /v1/jp/companies/verify-batch` — $0.008 per item

`GET /v1/jp/filings` — $0.01