ClawHub
Back to skill

Security audit

Yufluent Clawhub Publish Yufluentcn B2b Assist

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed cloud-based B2B quotation helper that uses a Yufluent API key and sends the user-provided inquiry details to the configured service.

Install only if you are comfortable sending buyer inquiries, pricing, MOQ, lead-time, payment terms, and company profile text to the configured Yufluent/OpenClaw service. Keep TOKENAPI_KEY out of source control and logs, and do not set TOKENAPI_BASE_URL to an untrusted host.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Tainted flow: 'url' from os.getenv (line 271, credential/environment) → requests.post (network output)

Critical
Category
Data Flow
Content
}
    if body is not None:
        kwargs["json"] = body
    return requests.post(url, **kwargs)


def _raise_for_status(resp: requests.Response) -> None:
Confidence
91% confidence
Finding
return requests.post(url, **kwargs)

Vague Triggers

Medium
Confidence
78% confidence
Finding
The trigger list contains broad phrases such as generic B2B reply and quotation requests that could match ordinary conversation and invoke the skill unintentionally. Because the skill encourages use of a cloud harness and API-backed workflow, accidental activation could send user-provided business content to an external service without a deliberate opt-in at that moment.

Missing User Warnings

Low
Confidence
74% confidence
Finding
The instructions tell users to place an API key in an environment variable or .env file but do not warn about protecting that credential from source control, logs, screenshots, or shared systems. This increases the chance of accidental disclosure, especially for less experienced users following a quickstart guide.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The script sends buyer inquiry content and business details to a remote cloud service via run_skill() without any disclosure or consent mechanism in this file. In a B2B quoting context, messages may contain sensitive commercial information, pricing, customer identities, or trade terms, so silent transmission increases confidentiality and compliance risk.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill sends user-supplied payload fields to a remote cloud service, including transformed slot content and business conversation details, without any in-code user consent, notice, or data-minimization control. In a B2B quotation assistant, those payloads can contain customer identities, pricing, MOQs, shipping terms, and other commercially sensitive information, so silent transmission increases confidentiality and compliance risk.

VirusTotal

39/39 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.