ClawHub
Back to skill

Security audit

reddit-stock-sentiment-research

Security checks for vulnerabilities and agentic risk

Overview

This skill is a bounded Reddit and Yahoo Finance research helper with disclosed external API use and no evidence of hidden persistence, destructive actions, or credential theft.

Install only if you are comfortable sending public ticker/company/subreddit queries through Crawlora using your CRAWLORA_API_KEY. Do not include confidential watchlists, private investment plans, or sensitive research terms, and remember the output is sampled discussion, not investment advice.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (8)

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding

The skill includes shell command examples invoking external endpoints via a helper script, but it does not declare an explicit tool scope such as allowed-tools or permissions. That creates an authorization ambiguity where an agent runtime may permit broader shell/network use than intended, increasing the chance of unintended external requests or command execution beyond this narrow research workflow.

Content

No source excerpt is available for this finding.

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · reference/endpoints.md (reported line 7)May include surrounding context.

md
#!/usr/bin/env bash
# Crawlora REST helper — minimal, dependency-free (curl only).
# Calls https://api.crawlora.net/api/v1 with your Crawlora API key.
# Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills.
#
# Usage:

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/crawlora.sh (reported line 3)May include surrounding context.

sh
#!/usr/bin/env bash
# Crawlora REST helper — minimal, dependency-free (curl only).
# Calls https://api.crawlora.net/api/v1 with your Crawlora API key.
# Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills.
#
# Usage:

External Transmission

Medium
Category
Data Exfiltration
Confidence
60% confidence
Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · scripts/crawlora.sh (reported line 20)May include surrounding context.

sh
#!/usr/bin/env bash
# Crawlora REST helper — minimal, dependency-free (curl only).
# Calls https://api.crawlora.net/api/v1 with your Crawlora API key.
# Get a free key (2,000 credits/mo, no card) at https://crawlora.net?utm_source=github&utm_medium=referral&utm_campaign=crawlora-skills.
#
# Usage:

Sudo/Root Execution

Medium
Category
Privilege Escalation
Confidence
80% confidence
Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · scripts/crawlora.sh (reported line 90)May include surrounding context.

sh
# config supplies the header and is removed automatically on exit.
umask 077
curl_config="$(mktemp "${TMPDIR:-/tmp}/crawlora-curl.XXXXXX")"
chmod 600 "$curl_config"
trap 'rm -f "$curl_config"' EXIT
printf 'header = "x-api-key: %s"\n' "$CRAWLORA_API_KEY" >"$curl_config"
auth=(--config "$curl_config")

Vague Triggers

Low
Category
Not specified by scanner
Confidence
79% confidence
Finding

The description says to use the skill for requests like asking what Reddit investors are saying about a ticker or to summarize bullish and bearish themes, but it does not define specific trigger phrases, exclusion conditions, or a narrow invocation context. In a manifest/markdown context, this can be interpreted broadly and may overlap with general market-research requests beyond the intended bounded workflow.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
78% confidence
Finding

The workflow instructs the agent to send company names, ticker queries, subreddit filters, and related research terms to external services, but it does not tell the user that those queries will be transmitted off-platform. While the data involved is usually low sensitivity, omission of this notice can expose confidential research interests or unpublished watchlists when users assume the analysis is local.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

This markdown file instructs users to supply an x-api-key header from $CRAWLORA_API_KEY, which involves sensitive credential use. While the endpoint reference is technical and concise, it does not include any warning or handling guidance about protecting the API key or avoiding accidental exposure when invoking the workflow.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.