ClawHub
Back to skill

Security audit

drivethru-adidas-click

Security checks across malware telemetry and agentic risk

Overview

The skill is coherent for adidas Click automation, but it deserves Review because it can place real B2B orders, attempts automatic host dependency installation, and includes live-portal HTML capture notes without enough sensitive-data handling guidance.

Install only in an environment allowed to access adidas Click and place purchases. Preinstall Playwright/Chromium dependencies if you do not want the skill to attempt host changes, keep credentials in env/stdin rather than CLI flags, use confirm=false for review before any purchase, and redact live portal HTML/URLs before sharing them with an assistant.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill clearly uses sensitive capabilities including environment variables for credentials, browser/network access to a third-party portal, and shell execution via `python3 scripts/adidas.py`, yet no explicit permissions model is declared. That mismatch can cause the hosting agent to under-enforce capability boundaries, making secret access and external actions less visible and less governable than they should be.

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The skill performs autonomous host modification by installing browser binaries and attempting system dependency installation via `playwright install` / `install-deps`. That exceeds normal portal automation and can change the agent host state, consume significant bandwidth/disk, and trigger privileged package operations without explicit user consent.

Context-Inappropriate Capability

Low
Confidence
84% confidence
Finding
The code spawns and configures an Xvfb virtual display and mutates `DISPLAY` for the process, which is an undeclared host-level capability beyond simple adidas portal interaction. While not inherently malicious, it broadens the skill's operational footprint and could surprise operators or conflict with other workloads on shared hosts.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The notes instruct a progressive HTML-capture workflow using live adidas Click URLs and pasted page HTML from an authenticated B2B portal, but they do not warn that those captures may contain sensitive business data such as customer identifiers, order numbers, addresses, pricing, tokens, or other account-specific information. In this skill context, that omission is more dangerous because the workflow explicitly depends on copying data from a live production system and sharing it with an external assistant, increasing the chance of inadvertent data exfiltration.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.