ClawHub

Ahrefs Connection

Security checks across malware telemetry and agentic risk

Overview

This is a coherent Ahrefs API helper that uses an API key to make SEO-data requests to Ahrefs, with no evidence of hidden persistence, unrelated data collection, or destructive behavior.

Install only if you intend the agent to query Ahrefs with your SEO targets. Store the Ahrefs API key securely, avoid submitting confidential domains or keywords without approval, set API unit limits if possible, and review large or batch requests because they may consume paid quota.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
This markdown file describes making real-time Ahrefs API requests and includes examples that transmit targets and keywords to Ahrefs, but it does not clearly warn users about the privacy implication of sending their input to an external service. For markdown files, SQP-2 applies when behaviours affecting user data or privacy are not disclosed.

External Transmission

Medium
Category
Data Exfiltration
Content
### 2. Make API Requests

Use `curl` or similar tools to call the Ahrefs API. Base URL: `https://api.ahrefs.com/v3`

**Example - Get domain overview:**
```bash
Confidence
50% confidence
Finding
https://api.ahrefs.com/

External Transmission

Medium
Category
Data Exfiltration
Content
**Example - Get domain overview:**
```bash
curl -X GET "https://api.ahrefs.com/v3/site-explorer/domain-overview?target=example.com" \
  -H "Authorization: Bearer $AHREFS_API_KEY"
```
Confidence
50% confidence
Finding
https://api.ahrefs.com/

External Transmission

Medium
Category
Data Exfiltration
Content
**Example - Keyword metrics:**
```bash
curl -X GET "https://api.ahrefs.com/v3/keywords-explorer/overview?keyword=seo+tools&country=us" \
  -H "Authorization: Bearer $AHREFS_API_KEY"
```
Confidence
50% confidence
Finding
https://api.ahrefs.com/

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal