ClawHub
Back to skill

Security audit

Stock Data Export

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward A-share market data export helper with no embedded code, persistence, or hidden high-risk behavior in the inspected artifacts.

Install this only if you are comfortable using Tushare and providing a Tushare API token for market data export. Non-Chinese readers may find the documentation hard to evaluate unless the publisher adds bilingual metadata or a locale note.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Medium
Confidence
88% confidence
Finding
The markdown content, including the title, usage instructions, commands, and configuration guidance, is entirely in Chinese. This can violate language/locale policy when no user opt-in, alternative language option, or explicit justification for a Chinese-only audience is provided.

Natural-Language Policy Violations

Medium
Confidence
95% confidence
Finding
The display name and description are presented only in Chinese, which can amount to a language/locale policy violation when the skill does not offer any user language choice or explicitly document that it is intended only for a Chinese-speaking or China-specific audience. Although the domain is A-share finance, the manifest does not clearly state a justified locale restriction or provide an opt-in.

Static analysis

No suspicious patterns detected.