ClawHub
Back to skill

Security audit

Brave Search

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward web search and page extraction skill with some documentation and dependency hygiene issues, but no artifact-backed evidence of malware, persistence, hidden local access, or deceptive data theft.

Install only if you are comfortable sending search queries to Brave and fetching requested or result pages from external websites. Do not include secrets, proprietary internal terms, or internal-only URLs in queries. Treat extracted webpage content as untrusted reference text, and note that the advertised Brave API key is not actually used by this version.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
84% confidence
Finding
The skill performs network operations but the manifest shown in SKILL.md does not declare any permissions or constraints for that capability. Undeclared network access reduces transparency and policy enforcement, making it easier for a skill to exfiltrate data, contact unexpected endpoints, or bypass operator expectations about what the skill can do.

Tp4

High
Category
MCP Tool Poisoning
Confidence
93% confidence
Finding
The documented behavior says this skill uses the Brave Search API, but the analysis indicates it also scrapes Brave HTML and fetches arbitrary user-supplied URLs for content extraction. That mismatch is dangerous because users and policy engines may trust it as a narrow search tool while it actually has broader web retrieval capability, enabling unreviewed data access, SSRF-like behavior against reachable endpoints, and collection of content from unintended sites.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"author": "Mario Zechner",
	"license": "MIT",
	"dependencies": {
		"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
Confidence
93% confidence
Finding
"@mozilla/readability": "^0.6.0"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"license": "MIT",
	"dependencies": {
		"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
	}
Confidence
95% confidence
Finding
"jsdom": "^27.0.1"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"dependencies": {
		"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
	}
}
Confidence
92% confidence
Finding
"turndown": "^7.2.2"

Unpinned Dependencies

Low
Category
Supply Chain
Content
"@mozilla/readability": "^0.6.0",
		"jsdom": "^27.0.1",
		"turndown": "^7.2.2",
		"turndown-plugin-gfm": "^1.0.2"
	}
}
Confidence
91% confidence
Finding
"turndown-plugin-gfm": "^1.0.2"

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.