ClawHub
Back to skill

Security audit

crawlora

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed wrapper for a public web-data API, with no evidence of hidden persistence, local data harvesting, destructive behavior, or unrelated authority.

Install only if you are comfortable sending public-web lookup terms, URLs, IDs, and request bodies to Crawlora. Do not use it for secrets, internal sites, authenticated content, regulated data, or sensitive personal lookups without explicit user approval, and keep CRAWLORA_API_KEY and CRAWLORA_API_BASE under your control.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The trigger text is extremely broad: it says to use the skill whenever the user needs 'real data from a public website' and for 'any task' that would otherwise involve scraping or parsing HTML. This can cause over-invocation, sending user prompts or derived queries to a third-party API in cases where a narrower tool, local knowledge, or safer workflow would be more appropriate, increasing privacy, cost, and unintended external data exposure risks.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The catalog explicitly instructs callers to send requests to an external API using an API key, but this documentation does not include any warning that user prompts, query terms, URLs, IDs, and other inputs will be transmitted off-platform. In an agent skill, that omission is security-relevant because it can cause silent exfiltration of user-provided data to a third-party service without informed consent or policy gating.

External Transmission

Medium
Category
Data Exfiltration
Content
The complete Crawlora public-web-data API surface, grouped by platform. Use this to pick the right endpoint for any job, then call it via `scripts/crawlora.sh` (see SKILL.md).

All paths are relative to the API base `https://api.crawlora.net/api/v1` and require the header `x-api-key: $CRAWLORA_API_KEY`. Path params like `{id}` are substituted into the URL; `GET` params go in the query string; `POST` params go in a JSON body.

**987 endpoints across 101 platform group(s).**
Confidence
94% confidence
Finding
https://api.crawlora.net/

External Transmission

Medium
Category
Data Exfiltration
Content
set -euo pipefail

: "${CRAWLORA_API_KEY:?Set CRAWLORA_API_KEY first — get a free key at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills}"
base="${CRAWLORA_API_BASE:-https://api.crawlora.net/api/v1}"

method="GET"
body=""
Confidence
72% confidence
Finding
https://api.crawlora.net/

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:36