ClawHub

Etsy Listing Optimizer

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Etsy listing optimization helper with expected marketplace, keyword, and export integrations, and no evidence of hidden execution or destructive behavior.

Install only if you are comfortable letting your agent use Etsy and keyword-research credentials for listing optimization. Use limited-scope keys where possible, review all generated changes before publishing, and be deliberate before enabling competitor scraping, Slack notifications, or Google Sheets exports because those may send business data to third-party services.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
88% confidence
Finding
The 'use when' guidance is broad enough that an agent could invoke this skill for generic optimization or analysis requests that are not clearly Etsy-specific. Over-broad activation increases the chance of unnecessary external calls, unintended data sharing, or application of competitor-scraping behavior in contexts the user did not intend.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill advertises competitor scraping and integrations with Etsy API, Google Trends, SEMrush, Slack, and Google Sheets, but does not provide a clear user-facing notice that listing data, business metadata, or analysis results may be transmitted to third parties. This creates a real privacy and data-governance risk, especially for seller business information and externally exported optimization outputs.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal