ClawHub
Back to skill

Security audit

Yufluent Clawhub Publish Yufluentcn Shopify Operator

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a legitimate cloud e-commerce helper, but it can transmit sensitive store details and an API key to a configurable remote endpoint without enough guardrails.

Review the provider's privacy and retention terms before installing. Avoid entering customer data, private storefront analytics, or proprietary strategy details unless you are comfortable sending them to the service. Do not override TOKENAPI_BASE_URL except to an endpoint you control and trust, and keep the API key scoped or disposable where possible.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Tainted flow: 'url' from os.getenv (line 271, credential/environment) → requests.post (network output)

Critical
Category
Data Flow
Content
}
    if body is not None:
        kwargs["json"] = body
    return requests.post(url, **kwargs)


def _raise_for_status(resp: requests.Response) -> None:
Confidence
92% confidence
Finding
return requests.post(url, **kwargs)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly asks users to provide store URLs, GMV ranges, SKU counts, and operational pain points, then instructs that this data be sent to a remote cloud service, but it does not place a clear privacy, retention, or transmission warning at the collection step. This creates a real risk of oversharing commercially sensitive business data without informed consent or minimization.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The script forwards user-controlled fields such as message, niche, store_url, and context to a remote service via run_skill() without any disclosure, consent prompt, or local minimization in this file. Because the skill is positioned as a cloud thin client and may handle business-sensitive store information, users could unintentionally transmit proprietary or personal data to an external API.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.