ClawHub
Back to skill

Security audit

YOUKU User Profile API

Security checks for vulnerabilities and agentic risk

Overview

This is a narrow YOUKU profile lookup skill, but it handles the API token in leak-prone places and gives little privacy guidance for profile lookups.

Install only if you trust JustOneAPI and need this specific YOUKU profile lookup. Use a dedicated, revocable API token with limited privileges if available, avoid running it on shared systems where process arguments may be visible, and do not use it for bulk profiling or unauthorized collection of profile data.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The API token is defined as a required query parameter and is appended to the URL before the request is sent. Query-string secrets are routinely exposed in logs, browser/history tooling, reverse proxies, analytics systems, error reports, and monitoring platforms, so the token can leak beyond the intended recipient even if HTTPS is used.

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The skill exposes retrieval of identifiable user profile data using a user ID and token, but the description contains no privacy warning, consent expectation, or access-control guidance. In an agent context, this can normalize silent collection or enrichment of third-party profile data, increasing the chance of privacy violations, unauthorized profiling, or misuse of account metadata at scale.

Static analysis

Detected: suspicious.secret_argv_exposure

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
SKILL.md:41