ClawHub
Back to skill

Security audit

pangolinfo-amazon-product-explorer

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Amazon product-research workflow that uses Pangolinfo tools and an API key, with no evidence of hidden execution, exfiltration, persistence, or destructive behavior.

Install this only if you intend to use Pangolinfo for Amazon product research and are comfortable providing a Pangolinfo API key in the runtime environment. Treat that key as a secret, monitor quota usage, and review prompts before allowing Full-mode or review-scraping workflows that may consume more credits.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The skill explicitly instructs the agent to read `PANGOLINFO_API_KEY` from the environment. Accessing secrets is more privileged than necessary for a product-exploration/reporting skill, and embedding that instruction in skill content creates a path for credential exposure or misuse if the agent ever surfaces, logs, or repurposes the value. The fact that this is a commerce-analysis skill, not a credential-management skill, makes the secret-access behavior unjustified and therefore risky.

Vague Triggers

Medium
Confidence
76% confidence
Finding
Broad trigger phrases increase the chance the skill is invoked in contexts the user did not clearly intend. Because this skill can drive multiple external tool calls and consume paid quota, overbroad activation can cause unintended data access, unnecessary spend, and confusing automation against ambiguous user requests.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill documentation normalizes access to the sensitive `PANGOLINFO_API_KEY` without any explicit warning that the model must not reveal, log, or manipulate the credential. In an adversarial skill context, instructing secret access without strong handling constraints raises the risk of accidental disclosure through outputs, traces, prompt injection chains, or debugging behavior.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.