ClawHub
Back to skill

Security audit

Yufluent Clawhub Publish Yufluentcn Comp Track

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed cloud API client for competitor listing analysis, with no evidence of hidden persistence, destructive behavior, or unrelated data access.

Install only if you are comfortable sending the listing text you provide, including optional own product copy, to Yufluent's cloud service using your TOKENAPI_KEY. Do not paste confidential or partner-restricted content unless your organization permits it, and avoid setting TOKENAPI_BASE_URL unless you trust the exact endpoint.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Tainted flow: 'url' from os.getenv (line 271, credential/environment) → requests.post (network output)

Critical
Category
Data Flow
Content
}
    if body is not None:
        kwargs["json"] = body
    return requests.post(url, **kwargs)


def _raise_for_status(resp: requests.Response) -> None:
Confidence
87% confidence
Finding
return requests.post(url, **kwargs)

Vague Triggers

Medium
Confidence
76% confidence
Finding
The trigger phrases include broad terms such as '竞品分析' and 'competitor analysis', which can cause the skill to activate in contexts where the user did not clearly consent to sending business-sensitive content to a third-party service. In this skill's context, accidental activation matters because the workflow explicitly routes pasted listing content to a remote cloud harness.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
Although the document mentions cloud execution, it does not present a prominent, plain-language warning at the point of use that competitor content and optional own-listing content are transmitted to Yufluent's remote service for processing. This creates a data-handling transparency issue and increases the risk of users sharing confidential product copy or partner-restricted content without informed consent.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script sends user-supplied competitor listing text, and optionally the user's own listing text, to a remote cloud API via run_skill() without any explicit notice or confirmation in this file. Because listing content can contain proprietary marketing copy, keywords, or sensitive business information, this creates a real data-exposure risk if users assume processing is local.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.