ClawHub
Back to skill

Security audit

Googleplay Public Data Api

Security checks for vulnerabilities and agentic risk

Overview

This skill is a read-only guide for querying public Google Play data through ReplyNodes, with no evidence of hidden execution, credential theft, persistence, or write access.

Before installing, confirm you are comfortable sending Google Play lookup terms and package IDs to ReplyNodes, keep any ReplyNodes API key in an environment variable, and check the capabilities endpoint for rate limits or metered costs before running batches.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

YARA rule 'info_stealer': Information stealer patterns (credential harvesting, browser data theft) [malware]

High
Category
YARA Match
Confidence
75% confidence
Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · README.md (reported line 11)May include surrounding context.

md
es skill for ReplyNodes' production Google Play data API.

## Coverage

The skill documents all eleven production operations: app details, search, similar apps, permissions, reviews, developer apps, categories, category apps, suggestions, availability, and data safety.

## Safety

The skill uses only public store data through `https://api.replynodes.com`. It never uses Google account credentials, cookies, OAuth sessions, publishing paths, catalog enumeration, or write operations. Keep the ReplyNodes API key in an environment variable and out of logs and reports.

## Pricing

The production capability matrix currently prices each operation at $0.003 per call. Check capabilities before making paid requests.

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
80% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 24)May include surrounding context.

md
The reviewed Google Play GET routes are available on the anonymous path with no
account or API key. The first request path is free/keyless and read-only; rate
limits and prepaid-credit behavior are reported by the live capabilities and
response headers. Do not ask the user to sign up or paste credentials. If an
already-configured authenticated host chooses to send a key, it goes only to
`https://api.replynodes.com`.

External Transmission

Medium
Category
Data Exfiltration
Confidence
50% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 76)May include surrounding context.

curl --fail-with-body --silent --show-error
-H "Authorization: Bearer $REPLYNODES_API_KEY"
-H "Accept: application/json"
"https://api.replynodes.com/v1/googleplay/app_details/com.google.android.youtube?country=us&language=en"

text

Search and suggestions use `term`; list-like operations accept bounded `limit` values. Common locale parameters are `country` and `language`. Reviews may accept `limit`, `sort`, `score`, and `next_token`. Availability accepts a bounded comma-separated `countries` list.