ClawHub
Back to skill

Security audit

AI电商专家｜Shopify 独立站 图片视频全内容

Security checks across malware telemetry and agentic risk

Overview

The skill matches its IMIVA ecommerce-content purpose, but it should be reviewed because its helper runs a mutable npm package while forwarding the full local environment.

Review before installing. Use a dedicated shell or client profile with only the IMIVA token and required variables, prefer pinning the npm package to a specific reviewed version, and only provide product media that you are comfortable uploading to the IMIVA service. Confirm credits and task parameters before creating paid generation tasks.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

subprocess module call

Medium
Category
Dangerous Code Execution
Content
env = os.environ.copy()
    env["MCP_TOKEN"] = token
    env["API_URL"] = os.environ.get("IMIVA_API_URL", os.environ.get("API_URL", DEFAULT_API_URL))
    proc = subprocess.Popen(
        [npx, "-y", PACKAGE],
        stdin=subprocess.PIPE,
        stdout=subprocess.PIPE,
Confidence
82% confidence
Finding
proc = subprocess.Popen( [npx, "-y", PACKAGE], stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, bufsize=1,

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill instructs the user to run shell commands, read local files, and use environment variables for secrets, but it does not declare permissions or capability requirements. This creates a transparency and consent gap: a host or user may not realize the skill can access local paths and secret-bearing environment variables, increasing the risk of unintended token exposure or unsafe command execution in a more permissive client.

Env Variable Harvesting

High
Category
Data Exfiltration
Content
def invoke(method: str, params: dict | None = None) -> dict:
    npx, token = require_runtime()
    env = os.environ.copy()
    env["MCP_TOKEN"] = token
    env["API_URL"] = os.environ.get("IMIVA_API_URL", os.environ.get("API_URL", DEFAULT_API_URL))
    proc = subprocess.Popen(
Confidence
88% confidence
Finding
os.environ.copy()

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.