ClawHub
Back to skill

Security audit

yansheng-fund-flow

Security checks across malware telemetry and agentic risk

Overview

This skill runs only a local demo script, but its documentation mixes clear simulated-data warnings with a contradictory real-data source table for financial fund-flow analysis.

Review this as a demo-only financial teaching skill, not a market-data or investment-analysis tool. Install only if you are comfortable with synthetic outputs, and avoid using its numbers for trading, investment, reporting, or any automated financial decision until the documentation is corrected or real data retrieval is implemented and verified.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Tp4

High
Category
MCP Tool Poisoning
Confidence
92% confidence
Finding
The skill presents itself as a fund-flow monitoring and analysis tool, but the content explicitly states the outputs are deterministic demo data rather than real market data. This creates a trust and integrity problem: users may rely on fabricated financial signals while the skill branding and interface strongly resemble a real market-analysis capability.

Intent-Code Divergence

High
Confidence
97% confidence
Finding
The document simultaneously claims that all outputs are deterministic demo data and that the skill uses real external financial data sources updated on trading days. This contradiction can mislead users into believing the outputs are authoritative or sourced from live markets, which is especially dangerous in a finance context where users may make decisions based on false provenance.

Description-Behavior Mismatch

Medium
Confidence
96% confidence
Finding
The skill advertises fund-flow monitoring and analysis, but the implementation only derives deterministic values from a hash of the provided stock codes and current date labeling. Although the script discloses that the data is demo-only, the mismatch between the skill's stated purpose and actual behavior can mislead downstream users, automations, or agents into treating synthetic output as market intelligence.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.