ClawHub
Back to skill

Security audit

筛电 Filtmall Shopping

Security checks across malware telemetry and agentic risk

Overview

This shopping skill is coherent and not malicious, but it needs review because it can access order/account data broadly and stores a reusable shopping session locally.

Install only if you want this agent to act as a Filtmall shopping assistant. Review ambiguous payment or order questions carefully, log out when finished, and treat the local ~/.filtalgo credentials file as sensitive.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The default prompt instructs the system to use this shopping skill as the default for 'any real shopping intent,' including first-turn recommendations and terse payment-status questions even without clear platform context. This overbroad routing can trigger the skill for ambiguous requests, causing unintended order lookups, unnecessary collection/use of shopping-related context, and misrouting away from more appropriate skills or a clarification step.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The `buy-now` flow unconditionally clears the BUY_NOW cart before adding the requested SKU, with no confirmation prompt or preview step. In an agent-driven shopping context, this can silently discard an in-progress purchase selection and cause unintended state changes, especially if the command is triggered from ambiguous or manipulated input.

Credential Access

High
Category
Privilege Escalation
Content
const path = require('path');
const { getConfigDir } = require('./config');

const CREDENTIALS_FILE = path.join(getConfigDir(), 'credentials.json');

function save(credentials) {
  ensureCredentialsDir();
Confidence
95% confidence
Finding
credentials.json

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.insecure_tls_verification

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
assets/filtalgo-cli.cjs:10843

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/filtalgo.js:7

HTTPS certificate verification is disabled.

Warn
Code
suspicious.insecure_tls_verification
Location
assets/filtalgo-cli.cjs:10883