MAL Anime Tracker

• Outcome: Pass
• Latest audit: May 28, 2026 · 9:53 AM UTC
• Version: 1.9.3

Overview

This is a coherent MyAnimeList tracking skill, but users should protect OAuth tokens and be careful with list-changing commands.

Install only if you are comfortable giving the skill access to your MyAnimeList account data and list-management actions. Store tokens in OpenClaw vault or another secret manager, avoid pasting secrets into shared terminals or files, rotate tokens if exposed, and double-check anime IDs before using delete.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (8)

Context-Inappropriate Capability

Medium

• Confidence: 96% confidence
• Finding: This helper exchanges OAuth credentials and then prints the returned access and refresh tokens to stdout, exposing authentication material to terminal history, logs, orchestration systems, or other components that capture process output. In addition, error logging includes raw server responses, which may leak sensitive details depending on the provider's behavior.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill instructs users to place OAuth access tokens, refresh tokens, client IDs, and client secrets into environment variables or a vault, but provides no warning about secure storage, least-privilege handling, or avoiding exposure in shell history, logs, screenshots, or shared configs. Because these credentials grant access to a user's MAL account and token refresh capability, poor handling could lead to account compromise or persistent unauthorized API access.

Missing User Warnings

Medium

• Confidence: 84% confidence
• Finding: The documented `delete` command performs a destructive action on a user's MAL list, but the documentation gives no warning that it removes entries and may be hard to notice or reverse during routine CLI use. While this is not remote code execution or credential theft, lack of cautionary wording increases the chance of accidental data loss or unintended account changes.

Missing User Warnings

Medium

• Confidence: 62% confidence
• Finding: These endpoints expose detailed anime/manga history and preference data, including list status and timestamps, and the spec does not include strong user-facing warnings or data-minimization guidance. In an agent-skill context, this increases the chance that a skill requests or stores sensitive preference/history data without users understanding the privacy implications.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

requests
python-dotenv

• Confidence: 97% confidence
• Finding: The dependency 'requests' is unpinned, so installs may resolve to different versions over time, including versions with known security flaws or breaking changes. In this file, that risk is amplified because static analysis also reports multiple advisories affecting requests, meaning the package could resolve to a vulnerable release depending on the environment.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

requests
python-dotenv

• Confidence: 90% confidence
• Finding: The dependency 'python-dotenv' is unpinned, which makes builds non-reproducible and can introduce vulnerable or incompatible versions unexpectedly. Although the cited advisory impact is lower than for requests, allowing arbitrary version resolution still weakens supply-chain security.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High

• Category: Supply Chain
• Confidence: 96% confidence
• Finding: The file includes 'requests' without a version constraint, and the analyzer associates that package with multiple known CVEs, including credential leakage and TLS/session verification issues. Because no safe version is specified, the environment may install a vulnerable release, enabling data exposure, credential leakage, or weakened transport security depending on how the skill uses HTTP requests.

Known Vulnerable Dependency: python-dotenv — 1 advisory(ies): CVE-2026-28684 (python-dotenv: Symlink following in set_key allows arbitrary file overwrite via )

Low

• Category: Supply Chain
• Confidence: 78% confidence
• Finding: The file includes 'python-dotenv' without a version restriction, and the analyzer reports an advisory involving symlink following in 'set_key' that could permit arbitrary file overwrite in affected versions. This is less dangerous unless the skill actually invokes the vulnerable functionality on attacker-influenced paths, but the dependency declaration still permits installation of an affected release.

Static analysis

No suspicious patterns detected.