ClawHub
Back to skill

Security audit

ticket-monitor

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent ticket-monitoring tool, but it asks users to place a live browser session cookie in configuration to bypass anti-crawling controls without enough safety disclosure.

Review before installing. Use this only if you are comfortable with a tool storing and sending your Damai browser session cookie; treat that cookie like a password, avoid sharing config files or logs, prefer running without a cookie when possible, and use conservative polling intervals that comply with the platform's rules.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

High
Confidence
95% confidence
Finding
The documentation instructs users to copy a live browser Cookie string to reuse an authenticated session for bypassing anti-bot checks, but does not clearly warn that cookies are sensitive session credentials. This can lead to account takeover if the cookie is exposed in config files, logs, screenshots, shell history, or shared environments, and it normalizes circumventing platform protections.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The anti-crawling guidance explicitly recommends using a logged-in browser cookie to get around challenge behavior, but omits a clear warning about possible account sanctions, ToS violations, and exposure of authenticated session data. In this context, the skill is specifically designed to monitor a commercial ticketing platform, which makes operational misuse and credential mishandling more likely.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The code forwards caller-supplied cookies via opts.cookie directly to https://mtop.damai.cn in the Cookie header. Even if intended for authenticated monitoring, this creates a credential-handling risk because arbitrary session cookies can be sent to a third-party service without validation, scoping, minimization, or any in-file disclosure/consent mechanism. In this skill context, the feature is somewhat expected because the module explicitly suggests injecting a Damai login session to bypass anti-bot controls, but that also makes misuse or accidental leakage of sensitive account cookies more plausible.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.