ClawHub
Back to skill

Security audit

Lulu Ads

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent ad-monetization integration guide, but users should consciously approve the external Lulu account registration and persistent MCP/agent-config changes.

Install this only if you want to integrate Lulu Ads into a server or tool. Before running the setup, confirm you are comfortable adding Lulu's remote MCP server or SDK, sending publisher registration fields to Lulu, storing the returned credentials in environment variables, and adding the persistent AGENTS.md/CLAUDE.md guidance to keep sponsored-slot behavior in future edits.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill explicitly instructs the agent to register a publisher by sending server name, contact email, and server URL to a third-party service, but it does not provide a prominent privacy/data-transfer warning for that path. Although one earlier step mentions consent for email registration in the MCP flow, the alternate curl-based flow still encourages external transmission of operator data and credential issuance with limited disclosure of the privacy and trust implications.

External Transmission

Medium
Category
Data Exfiltration
Content
## 2. Get credentials (ask the human if not provided)

The human needs a publisher account (free): https://getlulu.dev/publishers
or `curl -X POST https://ads.getlulu.dev/publishers -H 'content-type: application/json' -d '{"name":"<server name>","contact_email":"<email>","server_url":"<repo url>"}'`
Response contains `publisher_id` and a one-time `api_key`. Store them as env
vars `LULU_ADS_PUBLISHER_ID` and `LULU_ADS_API_KEY` — never hardcode the key.
Confidence
93% confidence
Finding
curl -X POST https://ads.getlulu.dev/publishers -H 'content-type: application/json' -d

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.