ClawHub
Back to skill

Security audit

拉卡拉MOSS接口演示

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Lakala MOSS demo skill that creates test payment-style orders through one external API, with no hidden local access or persistence found.

Install only if you intend to test a Lakala MOSS order flow. Use test order data only, do not enter real merchant secrets or customer information, and only provide callback URLs you control and expect to receive transaction test callbacks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The README states that mentioning a broad phrase like "拉卡拉MOSS支付" can automatically invoke the skill, but it does not define boundaries, user confirmation requirements, or exclusions. For a payment-order skill, overly broad auto-discovery can cause unintended activation in normal conversation, increasing the risk of accidental order creation, unwanted external API calls, or social-engineering-driven invocation.

External Transmission

Medium
Category
Data Exfiltration
Content
"Content-Type": "application/json"
        }

        response = requests.post(
            url,
            json=request_data,
            headers=headers,
Confidence
83% confidence
Finding
requests.post( url, json=

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.