ClawHub
Back to skill

Security audit

yanmu-financial-data

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed stock-data helper that fetches selected ticker prices from Sina Finance and does not show hidden persistence, credential access, or destructive behavior.

Install only if you are comfortable with selected stock tickers being sent to Sina Finance for live quote lookup. The skill appears narrow and non-persistent, but it is not offline-only unless the live request fails.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill clearly instructs execution of a Python script that makes outbound requests to Sina Finance, yet no permissions are declared. This creates a transparency and governance gap: users and platforms cannot accurately assess or constrain the skill's network behavior, and external data transfer occurs without explicit declaration.

Missing User Warnings

Low
Confidence
89% confidence
Finding
The skill sends user-selected stock tickers to an external Sina Finance API but does not clearly warn users about this data sharing. While tickers are usually low-sensitivity, undisclosed outbound transmission can still expose user intent, research targets, or trading interest patterns to a third party.

Missing User Warnings

Low
Confidence
75% confidence
Finding
The script sends ticker-derived requests to an external finance service without clearly informing users that execution triggers outbound network traffic. In this skill context the transmitted data is low sensitivity, but undisclosed egress can still violate user expectations, policy, or restricted-runtime assumptions.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.