Security audit

CLISHOP

Security checks across malware telemetry and agentic risk

Overview

CLISHOP is a shopping plugin that openly supports real purchases, but its instructions allow high-impact account changes and reuse of stored personal data without clearly enforced confirmations.

Before installing, decide whether you are comfortable letting an agent access a shopping account that can save addresses, manage payment setup links, and place real orders. Use confirmations, conservative spending limits, and a dedicated profile, and ask the agent to confirm addresses and purchases before it acts.

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution, suspicious.env_credential_access, suspicious.exposed_secret_literal

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: dist/mcp.cjs:2947
Evidence: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/mcp.cjs:17152
Evidence: return process.env[key.toLowerCase()] || process.env[key.toUpperCase()] || "";

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: dist/mcp.cjs:22443
Evidence: const password = [REDACTED](encryptionKey, salt, 1e4, 32, "sha512");