ClawHub
Back to skill

Security audit

web-utilities-research

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a real Crawlora web-research helper, but its shell script exposes broader raw API access than the documented endpoint set.

Review before installing. Use this only if you are comfortable giving the agent raw Crawlora API access through your CRAWLORA_API_KEY. Keep the key scoped to this use, do not set CRAWLORA_API_BASE to an untrusted host, and confirm any payload before sending private, proprietary, or credential-like data.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Description-Behavior Mismatch

Medium
Confidence
90% confidence
Finding
The helper accepts an arbitrary API path from the caller and forwards it directly to Crawlora, which means the skill can invoke any Crawlora endpoint, not just the subset implied by the skill description. In an agent setting, this expands capability beyond the declared scope and can enable unintended data access or actions if higher-level controls assume only listed operations are available.

External Transmission

Medium
Category
Data Exfiltration
Content
curl -fsS -G "${auth[@]}" "${qs[@]}" "${base}${path}"
else
  [ -n "$body" ] || body="${rest[0]:-{}}"
  curl -fsS -X "$method" "${auth[@]}" \
    -H "Content-Type: application/json" -d "$body" "${base}${path}"
fi
Confidence
88% confidence
Finding
curl -fsS -X "$method" "${auth[@]}" \ -H "Content-Type: application/json" -d

External Transmission

Medium
Category
Data Exfiltration
Content
set -euo pipefail

: "${CRAWLORA_API_KEY:?Set CRAWLORA_API_KEY first — get a free key at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills}"
base="${CRAWLORA_API_BASE:-https://api.crawlora.net/api/v1}"

method="GET"
body=""
Confidence
72% confidence
Finding
https://api.crawlora.net/

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:27