ClawHub

Parcel Tracking Assistant

Security checks across malware telemetry and agentic risk

Overview

This parcel-tracking skill is coherent and purpose-aligned, but users should know tracking numbers may be sent to carrier sites, search providers, or 17track.

Before installing, be comfortable with tracking numbers being used in web searches, carrier tracking pages, and possibly 17track. For sensitive shipments, prefer asking the agent to use the official carrier site only and avoid aggregator lookups.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
94% confidence
Finding
The trigger phrases include very broad, everyday language like "where is my package" and "has it arrived?" that can match ordinary conversation without clear intent to invoke a tracking workflow. This can cause unintended activation of the skill and unnecessary processing or disclosure of tracking numbers and shipment context to external lookup services.

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill instructs the agent to send user-supplied tracking numbers to WebSearch, carrier sites, and 17track without any notice, consent, or privacy guardrails. Tracking numbers can reveal purchase activity, shipment status, approximate location, and recipient logistics metadata, so forwarding them to third parties creates a privacy and data-handling risk.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal