ClawHub
Back to skill

Security audit

Scrape Creators

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Scrape Creators connector wrapper, with disclosed account setup and API-use behavior.

Install this only if you intend to let your agent use your OOMOL-connected Scrape Creators account. API calls may use Scrape Creators or OOMOL credits, so review payloads for expensive or ambiguous requests, and only run the CLI install or account connection steps from trusted OOMOL sources when needed.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The instruction to use this skill for ANY Scrape Creators request is overly broad and can trigger the skill even for incidental mentions, reducing agent discretion and potentially causing unintended external calls. In this skill, invocation can lead to connector/API access and setup guidance that includes risky shell commands, so unnecessary activation increases the chance of side effects or misuse.

Static analysis

No suspicious patterns detected.