ClawHub
Back to skill

Security audit

Shopify Product Images Downloader

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to do what it claims, but its optional WebP mode can automatically install and execute an npm package without clear upfront disclosure.

Install only if you are comfortable with the WebP option potentially running npm and creating dependency files in the skill's script directory. To reduce risk, use the downloader without WebP conversion or manually install and review sharp before enabling WebP.

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Context-Inappropriate Capability

High
Confidence
96% confidence
Finding
The manifest describes a skill for downloading Shopify product images with optional WebP conversion, but this implementation achieves conversion by dynamically invoking npm through child_process.execSync and modifying the local runtime environment. Spawning subprocesses and installing packages from the network is not an obvious or necessary capability for an image downloader, and introduces a materially broader execution capability than the stated purpose suggests.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
When WebP mode is enabled and `sharp` is missing, the script announces that it will install `sharp` automatically and then executes `npm init -y` and `npm install sharp --no-save --ignore-scripts=false`. Although there is a general `--yes` gate earlier, there is no specific confirmation for this subprocess execution and package-install side effect, which changes the local environment and may run package scripts.

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/shopify-image-downloader.mjs:487