ClawHub
Back to skill

Security audit

Brave Search

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward web search and page-content extraction skill, with expected external network use and no evidence of hidden persistence, credential theft, or destructive behavior.

Install only if you are comfortable sending search terms to Brave Search and fetched URLs to destination websites. Do not use it for secrets, private internal URLs, confidential project names, or sensitive personal data. Be aware that the current implementation does not actually use the documented BRAVE_API_KEY.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
84% confidence
Finding
The skill documentation declares no permissions while the described behavior clearly requires outbound network access for web search and URL fetching. This is dangerous because it hides the true capability surface from reviewers and users, making it easier to approve or invoke a skill that can exfiltrate data or access untrusted remote content without explicit disclosure.

Tp4

High
Category
MCP Tool Poisoning
Confidence
94% confidence
Finding
The skill claims to use the Brave Search API, but the analyzed behavior indicates it also scrapes Brave's public web interface and fetches arbitrary user-supplied URLs for content extraction. That mismatch is dangerous because it conceals materially broader and riskier behavior than advertised, including unrestricted network retrieval from untrusted sites, which can bypass policy expectations and increase exposure to SSRF-style misuse, data exfiltration, and ingestion of malicious content.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"author": "Mario Zechner",
	"license": "MIT",
	"dependencies": {
		"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
Confidence
92% confidence
Finding
"@mozilla/readability": "^0.6.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"license": "MIT",
	"dependencies": {
		"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
	}
Confidence
95% confidence
Finding
"jsdom": "^27.0.1"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"dependencies": {
		"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
	}
}
Confidence
91% confidence
Finding
"turndown": "^7.2.2"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
	}
}
Confidence
90% confidence
Finding
"turndown-plugin-gfm": "^1.0.2"

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.