ClawHub
Back to skill

Security audit

GetMarkdown

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill does what it says, but users should know it sends requested URLs to WebCrawlerAPI and crawl mode stores markdown files locally.

Install this only if you are comfortable sharing target URLs and crawled content with WebCrawlerAPI and storing crawl outputs locally. Use a revocable or scoped API key where possible, avoid private or internal sites unless appropriate, and be careful with generic web search requests because the trigger wording is broader than the scrape/crawl use case.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger conditions are broad enough to match very common requests such as web search, web fetch, or fetching page content, which can cause this skill to activate outside its narrowly intended use. In an agent environment, over-broad auto-triggering increases the chance of unexpected external network access, unintended scraping/crawling behavior, and writing downloaded content to the workspace without sufficiently explicit user intent.

Vague Triggers

Medium
Confidence
90% confidence
Finding
The manifest uses very broad trigger phrases like 'websearch' and 'webfetch', which can cause this skill to activate for many generic browsing or retrieval requests. That increases the chance the agent sends user-requested URLs and retrieved content to a third-party service unnecessarily, expanding data exposure beyond what the user likely intended.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill instructs crawl mode to always save downloaded pages to local files under .webcrawlerapi/, but the user is not warned upfront in the skill description or trigger surface that local writes will occur. This can surprise users, create unwanted persistence of potentially sensitive content, and increase the risk of storing untrusted or confidential data on disk.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.