ClawHub
Back to skill

Security audit

weizhao-vip-search

Security checks for vulnerabilities and agentic risk

Overview

This VIP.com search skill is purpose-aligned, but it asks users to hand over a full logged-in browser cookie in an unsafe and under-scoped way.

Review carefully before installing. Only use this if you are comfortable giving the agent a VIP.com logged-in session cookie; prefer a temporary account/session, do not paste a main-account cookie into chat or shell history, run only the packaged script, and log out afterward to invalidate the session.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
77% confidence
Finding
The invocation language is broad enough to trigger on ordinary shopping requests, which can cause the skill to activate unexpectedly and begin a sensitive credential-collection workflow. In this context, broad triggering increases the chance that users are funneled into sharing login artifacts when they only asked for product search help.

Missing User Warnings

High
Confidence
98% confidence
Finding
The skill tells users how to extract and paste their full logged-in VIP.com Cookie, but it does not present a clear warning that this credential can grant account access and may expose personal or financial data. Because cookies are bearer tokens, requesting full disclosure to the agent creates a serious account-compromise and privacy risk if mishandled, logged, or reused.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The script requires a logged-in VIP.com session cookie and sends it in an outbound request, but it provides no user-facing warning that the cookie is a sensitive authentication credential. Users may paste a full session cookie without understanding that it can grant account access if mishandled, logged, shared, or reused beyond the intended purpose.

Ssd 3

High
Confidence
99% confidence
Finding
The skill explicitly instructs collection and later reuse of the user's full authenticated VIP.com Cookie in API requests. This is dangerous because the cookie is a reusable session credential; exposing it to the agent, command line, logs, or scripts can enable unauthorized account access, impersonation, and data exposure beyond the immediate search task.

Static analysis

No suspicious patterns detected.