ClawHub
Back to skill

Security audit

Budget Optimizer

Security checks for vulnerabilities and agentic risk

Overview

This skill is a focused marketing budget-planning assistant; it saves scoped planning outputs to memory, but that behavior is disclosed and aligned with its purpose.

Install only if you are comfortable with campaign budget inputs, chosen scenarios, tier mix, and constraints being written to the agent's memory files for later reuse. Avoid providing confidential financial details unless your workspace memory handling is appropriate for that data.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
This markdown skill explicitly states that it saves run outputs to `memory/influencer/budget-optimizer/...` and promotes selected data to `memory/hot-cache.md`. The description does not include any user-facing warning that campaign details and budget information will be persisted, which could affect user data handling and privacy expectations.

Static analysis

No suspicious patterns detected.