personal-shopper

clawhub:personal-shopper

View source

85/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

Score

85/100

HIGH 1

LOW 1

Findings (2)

HIGH

Resource URI manipulation MCP_003

mcp-attack L560

Detects dangerous URI schemes or path traversal in resource fields

src="data:

FIX

Implement strict input validation on the MCP tool's parameters. Block tool calls that attempt to modify the agent's system prompt, configuration, or tool definitions.

FP?

Likely FP if the match is a tool that legitimately updates configuration (e.g., a settings manager) and mentions prompt editing only for user-facing customization.

LOW

Base64 encode and send EXFIL_009

exfiltration L582

Detects base64 encoding of content followed by transmission

b64encode + fetch(

FIX

Block patterns that base64-encode data and immediately transmit it. If base64 encoding is needed, ensure the encoded data does not contain secrets and destinations are allowlisted.

FP?

Likely FP if base64 encoding is used for legitimate purposes like encoding images for display or constructing data URIs, with no network transmission.