ClawHub
Back to skill

Security audit

Yufluent Clawhub Publish Yufluentcn Shopify Operator

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a legitimate cloud e-commerce helper, but it can transmit sensitive store details and an API key to a configurable remote endpoint without enough guardrails.

Review the provider's privacy and retention terms before installing. Avoid entering customer data, private storefront analytics, or proprietary strategy details unless you are comfortable sending them to the service. Do not override TOKENAPI_BASE_URL except to an endpoint you control and trust, and keep the API key scoped or disposable where possible.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Tainted flow: 'url' from os.getenv (line 271, credential/environment) → requests.post (network output)

Critical
Category
Data Flow
Content
}
    if body is not None:
        kwargs["json"] = body
    return requests.post(url, **kwargs)


def _raise_for_status(resp: requests.Response) -> None:
Confidence
92% confidence
Finding
The code allows the request destination to be derived from TOKENAPI_BASE_URL without validation, then sends authenticated POST requests with the Bearer API key and payload to that URL. If an attacker can influence the environment or configuration, they can redirect traffic to an attacker-controlled host, causing credential exfiltration and disclosure of user payloads; the fallback logic broadens the set of transmitted data.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly asks users to provide store URLs, GMV ranges, SKU counts, and operational pain points, then instructs that this data be sent to a remote cloud service, but it does not place a clear privacy, retention, or transmission warning at the collection step. This creates a real risk of oversharing commercially sensitive business data without informed consent or minimization.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The script forwards user-controlled fields such as message, niche, store_url, and context to a remote service via run_skill() without any disclosure, consent prompt, or local minimization in this file. Because the skill is positioned as a cloud thin client and may handle business-sensitive store information, users could unintentionally transmit proprietary or personal data to an external API.

Static analysis

No suspicious patterns detected.