ClawHub
Back to skill

Security audit

Yufluent Clawhub Publish Yufluentcn Review Intel

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed cloud-based review analysis client, with privacy and dependency caveats users should understand before use.

Install only if you are comfortable sending review text and related product/platform context to Yufluent's cloud service using your TOKENAPI_KEY. Redact names, addresses, order IDs, and other sensitive or regulated data before analysis, and do not set TOKENAPI_BASE_URL unless you trust the endpoint.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (7)

Tainted flow: 'url' from os.getenv (line 271, credential/environment) → requests.post (network output)

Critical
Category
Data Flow
Content
}
    if body is not None:
        kwargs["json"] = body
    return requests.post(url, **kwargs)


def _raise_for_status(resp: requests.Response) -> None:
Confidence
93% confidence
Finding
return requests.post(url, **kwargs)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The README explicitly states that review analysis is executed in the cloud and requires an API key, but it does not warn users that submitted reviews and related product/platform context will be transmitted to a remote service. This creates a real privacy and compliance risk because users may unknowingly upload customer content, potentially including personal or sensitive commercial data, to a third party.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger phrases are very broad and map to common user intents like analyzing reviews or generating complaint summaries. This can cause the skill to auto-activate in ordinary conversations and route user-provided review text to the external cloud service without a sufficiently explicit, situational consent step.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
Although the document mentions a '云端模式' and Harness usage, it does not prominently warn at the point of use that review text is transmitted to a third-party cloud endpoint for processing. Users may provide sensitive or regulated review exports under the assumption of local handling, increasing privacy and compliance risk.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The script sends user-supplied review text to a remote cloud API via run_skill() without any explicit notice or confirmation at the point of transfer. Because reviews may contain personal, proprietary, or regulated data, silent transmission creates a real privacy and data-handling risk even if the functionality is expected in a cloud client.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.31.0
Confidence
97% confidence
Finding
requests>=2.31.0

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
72% confidence
Finding
requests

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.