ClawHub
Back to skill

Security audit

Smart Web Search

Security checks across malware telemetry and agentic risk

Overview

This is a web-search skill whose external requests and page fetching match its stated purpose, though users should treat searches as non-private.

Install only if you are comfortable with your search terms, IP/network metadata, and fetched result URLs being sent to search engines, geolocation services, and result websites. For sensitive topics, disable automatic fetching when possible and use explicit search requests to avoid accidental activation.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

High
Confidence
95% confidence
Finding
Very broad trigger keywords like 'search', 'find', 'look up', and common Chinese equivalents are likely to activate on routine user requests unrelated to this specific skill. In a skill with network access and content fetching, accidental invocation is risky because it can cause unintended external requests, disclose user queries to third parties, and override more appropriate tools or safer local handling.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The geolocation logic sends outbound requests to multiple third-party IP intelligence endpoints and to cn.bing.com, exposing the user's IP address and related network metadata without any explicit consent or warning in this file. In a search skill, this creates a privacy leak because network-identifying data is transmitted before the user even receives search results, and the multi-probe fallback increases disclosure surface.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill transmits user search queries to external search engines and then automatically fetches top result pages, potentially disclosing sensitive user input and browsing-derived metadata to multiple unrelated sites. Because this is automated and enabled by default for several top results, the privacy exposure is broader than a single deliberate user click and may surprise users who only expected a search summary.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.