Security audit

Digital Product Listing

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward writing assistant for marketplace listings, with no hidden code, credential use, persistence, or automatic publishing behavior found.

Before installing, prefer a pinned or trusted ClawHub installer version when possible and review generated prices, currency, and marketplace claims before publishing. The skill appears limited to drafting listing text and should not need credentials, marketplace account access, or permission to post products automatically.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: README.md:33
Finding: Unpinned Package Execution Through npx
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 92% confidence
Finding: The installation command uses npx clawhub@latest, which fetches and executes the latest published package version at install time rather than a reviewed, pinned release. If the upstream package is compromised or a malicious version is published, users could execute attacker-controlled code during installation.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: The README presents the invocation as 'Use digital-product-listing to generate listings for: ...' without clarifying whether this exact phrase is required, what variants are accepted, or when the skill should not activate. Because the description provides only a generic natural-language pattern and no negative examples or scope constraints, the trigger is ambiguous for a markdown skill description.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill activates on a very broad condition: any user description of a digital product with minimal constraints. In a multi-skill or general assistant environment, this can cause the skill to trigger during ordinary product discussions and steer the assistant into producing marketplace-ready commercial content the user did not explicitly request, creating scope confusion and unintended actions.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The cross-platform summary hard-codes pricing output in UK pound formatting without checking the user's locale, platform market, or preferred currency. This can mislead users into publishing incorrect prices, reduce listing accuracy for non-UK sellers, and cause avoidable financial or trust issues, though it does not directly create code execution or data exposure risk.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.