ClawHub
Back to skill

Security audit

Stock AI Analyzer

Security checks across malware telemetry and agentic risk

Overview

This skill is a finance research assistant whose data access, local report files, and tracking database use are disclosed and aligned with its stated stock-analysis purpose.

Install only if you are comfortable giving the skill access to a Tushare token, public finance-data network calls, local report/cache file creation, and a local PostgreSQL or SQLite tracking store. Review ALPHA_PG_URL/DATABASE_URL settings before using tracking commands so it writes to the intended database.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill instructs the agent to use environment variables, read and write local files, access PostgreSQL, and perform network retrieval, but it does not declare explicit permissions or constraints. This creates a broad implicit capability surface where a caller may assume the skill is text-only, while in practice it can access sensitive local state, external resources, and persistent storage.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.