ClawHub
Back to skill

Security audit

Naver news Search

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward Naver News search helper that uses declared Naver API credentials and does not show hidden, destructive, or unrelated behavior.

Install this if you are comfortable providing Naver developer credentials and sending your news search terms to Naver. Store the client secret in environment configuration or a secret store, do not commit it to files or prompts, and watch API quota if using the optional automation examples.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill metadata declares runtime requirements that imply access to environment variables and outbound network use, but it does not explicitly declare permissions for those capabilities. This creates a transparency and policy-enforcement gap: a caller or platform may underestimate what the skill can access, including API secrets and external connectivity.

Vague Triggers

Medium
Confidence
77% confidence
Finding
The description is broad enough that the skill could be invoked for generic news-related requests, not just Korean news via the Naver API. Over-broad routing can cause unintended tool use, unnecessary external data access, or user confusion about source scope and geographic/language limitations.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The documentation instructs users to configure NAVER_CLIENT_ID and NAVER_CLIENT_SECRET but does not include explicit guidance on protecting those secrets from logs, commits, screenshots, or accidental disclosure. Because this skill depends on API credentials, weak secret-handling guidance increases the chance of credential leakage and subsequent abuse of the Naver API account.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.