ClawHub
Back to skill

Security audit

Etsy Autolist

Security checks across malware telemetry and agentic risk

Overview

The skill is not clearly malicious, but it automates an Etsy shop with sensitive credentials and account-changing actions without enough scoping or user-control detail.

Install only if you are comfortable giving the skill Etsy account authority. Before use, create a dedicated Etsy app, grant the narrowest OAuth scopes possible, store tokens only in a secret manager, review every listing/message/renewal before it runs, and be ready to revoke the app if behavior is unexpected.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
82% confidence
Finding
The skill explicitly instructs users to store Etsy API credentials and run OAuth-related scripts, which implies access to environment secrets and outbound network use, yet no permissions are declared. This is dangerous because users and security controls cannot accurately assess or constrain the skill's capabilities, increasing the chance of overbroad secret exposure or unexpected API activity.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs users to store client credentials, client secrets, shop identifiers, and obtain OAuth access tokens, but provides no security guidance on protecting those secrets or limiting token scope. In a skill that performs account-linked marketplace actions, omission of secret-handling warnings increases the risk of credential leakage, account misuse, or unintended disclosure of shop data.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.