ClawHub
Back to skill

Security audit

Website Pickpocket

Security checks across malware telemetry and agentic risk

Overview

This skill is a website-cloning helper, but it documents authenticated crawling and anti-bot bypass techniques without enough safety boundaries.

Review carefully before installing. Use it only on sites you own or are explicitly authorized to copy, avoid putting real session cookies or localStorage tokens in plaintext config files, set tight page/depth limits, and do not use proxy or user-agent settings to bypass protections without permission.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The skill is explicitly designed to clone entire websites and save large volumes of content locally, but it does not warn users about disk usage, bandwidth consumption, or the possibility of unintentionally storing sensitive or copyrighted material. In a tool centered on bulk crawling and asset download, omission of these warnings increases the chance of unsafe or unauthorized use.

Missing User Warnings

High
Confidence
95% confidence
Finding
The authenticated crawling example instructs users to provide session cookies and localStorage values without warning that these are highly sensitive credentials that can grant account access. Because the skill's purpose is to reproduce sites, handling live authentication material without safeguards can lead to credential leakage, unauthorized scraping of private data, and local replication of protected content.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The troubleshooting guidance recommends user-agent spoofing and proxy configuration to bypass anti-bot protections, but gives no warning about authorization, terms-of-service, or the risk of causing operational impact to target sites. In the context of a website cloning tool, this materially increases misuse potential by normalizing evasion techniques.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.