ClawHub
Back to skill

Security audit

Stock Advisor Pro

Security checks for vulnerabilities and agentic risk

Overview

This stock-advisor skill is mostly purpose-aligned, but it needs review because its documented local default does not match the remote API used by the code and it includes risky install guidance.

Review before installing. Set STOCK_ADVISOR_API_URL only to a backend you trust, avoid using a real API key until the provider's data handling is clear, replace the curl-to-shell install step with a verified installation method, and clear the bundled portfolio.json sample before using the portfolio feature.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The README states that Deep Scan sends stock analysis requests to a cloud backend, but it does not clearly warn users that their queried tickers and possibly related usage data leave the local environment. In a plugin marketed partly around local privacy protection, this omission can mislead users into sharing financial-interest data with a remote service without informed consent.

External Script Fetching

Low
Category
Supply Chain
Content
本插件建议使用 `uv` 运行脚本，它会自动处理依赖：
```bash
# 确保已安装 uv
curl -LsSf https://astral.sh/uv/install.sh | sh
```

### 2. 配置环境
Confidence
97% confidence
Finding
The README instructs users to fetch and execute a remote installation script directly via curl piped into the shell. This creates a supply-chain and remote code execution risk: if the remote host, transport path, or script content is compromised, users will execute attacker-controlled code immediately on their machine.

Chaining Abuse

High
Category
Tool Misuse
Content
本插件建议使用 `uv` 运行脚本，它会自动处理依赖：
```bash
# 确保已安装 uv
curl -LsSf https://astral.sh/uv/install.sh | sh
```

### 2. 配置环境
Confidence
98% confidence
Finding
The '| sh' pattern is especially dangerous because it turns downloaded content directly into shell commands without review. In a local skill context, this increases risk because users are likely to follow setup instructions verbatim, potentially granting arbitrary code execution during installation before they can evaluate the plugin itself.

Static analysis

No suspicious patterns detected.