ClawHub
Back to skill

Security audit

Hithink Sector Selector

Security checks across malware telemetry and agentic risk

Overview

This skill sends sector-screening queries to the disclosed iWenCai financial API using an API key, with no evidence of hidden persistence, exfiltration, or destructive behavior.

Install this only if you are comfortable sending your sector-screening queries to iWenCai using an IWENCAI_API_KEY. Avoid putting confidential trading strategies or account identifiers in queries, and review any optional use of other finance or search tools when the primary API data is insufficient.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill clearly requires network access and reads an API key from the environment, yet no declared permissions are present. This creates a transparency and policy-enforcement gap: a host may not properly gate or warn about sensitive capabilities, increasing the chance of unintended secret access and external data transmission.

Context-Inappropriate Capability

Medium
Confidence
84% confidence
Finding
The documentation authorizes the skill to call other financial or search tools when its own data is insufficient, which expands behavior beyond the stated sector-screening purpose. That scope creep can route user queries and derived financial intent to additional tools or services without clear boundaries, increasing data exposure and reducing least-privilege control.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs sending user-supplied queries to an external API using authenticated requests, but it does not require any user-facing disclosure that query contents will leave the local environment. Users may unknowingly transmit sensitive financial interests, strategies, or identifiers to a third party, creating privacy and compliance risk.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.