ClawHub
Back to skill

Security audit

Shopify Checkout & Payment Connection Check

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed, read-only Shopify checkout and payment diagnostic that stores sensitive but aggregate results locally.

Install only for stores where you have merchant authorization. Keep `skill-hub.env`, client credentials, and `checkout-admin.json` private, and review the aggregate gateway/error-code data before sharing any report outside the business. Use the long-running Dev Dashboard and automation-token path only in a trusted local or server environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Intent-Code Divergence

Medium
Confidence
93% confidence
Finding
The script's onboarding text says it returns only redacted aggregate evidence, but the collect path writes structured payment telemetry to disk, including per-gateway totals, failure counts, and error-code distributions. While this is not raw credential data, it is still sensitive operational information that can reveal payment-provider usage and failure patterns, creating an information-disclosure risk if the output file is shared or stored insecurely.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access, suspicious.exposed_secret_literal

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/checkout-admin-read.mjs:99

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
references/onboarding-guide.md:45