Sephora Product Data API - Search, Shades, Prices, Reviews Summary

• Outcome: Pass
• Latest audit: Nov 12, 2026 · 7:25 AM UTC
• Version: 1.0.1

Overview

ClawScan’s verdict is benign with medium confidence: the findings describe product search requests sent to Scavio, but one notes that this third-party data sharing is not explicitly disclosed, and the scan was partial.

Before installing, consider that search queries and possibly a ZIP code may be transmitted to Scavio, a third-party service. The scan was partial: the manifest could not be parsed and the file was only partially inspected, so the benign verdict is not a guarantee of safety.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Output Handling: Unvalidated Output Injection, Cross-Context Output, Unbounded Output
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

The search workflow sends user-derived queries to Scavio without an explicit third-party data-sharing warning.

Medium

• Category: Output Handling
• Confidence: 88% confidence

Finding

The workflow instructs the agent to submit search queries and product selections to Scavio's API rather than directly to Sephora. Although the provider and API address are documented, the skill does not warn users that their search information—and a ZIP code if supplied—will be transmitted to this third-party service.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 104)May include surrounding context.

Examples

bash

curl -X POST https://api.scavio.dev/api/v1/sephora/product \
  -H "Authorization: Bearer $SCAVIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://www.sephora.com/product/mac-cosmetics-m-a-cximal-silky-matte-lipstick-P510799"}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 104)May include surrounding context.

Examples

bash

curl -X POST https://api.scavio.dev/api/v1/sephora/product \
  -H "Authorization: Bearer $SCAVIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://www.sephora.com/product/mac-cosmetics-m-a-cximal-silky-matte-lipstick-P510799"}'

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 70% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 205)May include surrounding context.

md

HEADERS = {"Authorization": f"Bearer {API_KEY}"}

def sephora(endpoint, body):
    r = requests.post(f"{BASE}/api/v1/sephora/{endpoint}", headers=HEADERS, json=body, timeout=120)
    r.raise_for_status()
    return r.json()["data"]