ClawHub
Back to skill

Security audit

Cloudflare API

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward Cloudflare administration helper, but it can make real DNS and tunnel changes with your Cloudflare token.

Install only if you want an agent to administer Cloudflare. Use a least-privilege token limited to the needed account and zones, protect ~/.cloudflare_token, review every DNS or tunnel change before running it, and treat tunnel run tokens printed to the terminal as secrets.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill clearly instructs the agent to run shell scripts and external binaries such as curl, jq, and cloudflared, but it does not declare permissions or execution boundaries. This creates a capability mismatch where a caller may not realize the skill can perform live networked and state-changing actions against Cloudflare infrastructure.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill documents record creation, updates, deletions, and tunnel deletion without warning about production impact or requiring confirmation. In a DNS/admin context, these actions can immediately disrupt service routing, expose internal services, or cause outages if invoked accidentally or through prompt manipulation.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.