ClawHub
Back to skill

Security audit

chinamoney-cd

Security checks for vulnerabilities and agentic risk

Overview

This skill coherently queries public ChinaMoney certificate-of-deposit data and saves a local screenshot, with no evidence of hidden persistence, credential access, or exfiltration.

Before installing, understand that each query launches Chromium, accesses ChinaMoney, and saves a screenshot such as cd_result_[bank].png in the system temp directory. Clean up those files if the bank searches or results are sensitive in your environment, and consider pinning Playwright in controlled deployments.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
87% confidence
Finding

The README advertises automatic screenshot saving but does not prominently warn users at the feature description that running a query will write output files to local storage. In this skill's context, screenshots may capture potentially sensitive financial query results and store them under /tmp by default, which can create unintended data exposure on shared or multi-user systems.

Content

No source excerpt is available for this finding.

Unpinned Dependencies

Low
Category
Supply Chain
Confidence
95% confidence
Finding

The dependency is specified with a lower bound only (playwright>=1.40.0), which allows installation of any newer version, including future major releases with unreviewed changes or compromised upstream packages. This weakens build reproducibility and supply-chain control, though by itself it is not direct evidence of malicious behavior.

Content

Scanner excerpt · requirements.txt (reported line 1)May include surrounding context.

text
playwright>=1.40.0