ClawHub

Smart Expense Tracker

Security checks across malware telemetry and agentic risk

Overview

This is a local expense-tracking skill that stores and edits personal finance records on disk, with no evidence of hidden network access or unrelated behavior.

Install only if you are comfortable keeping income and expense records locally in this OpenClaw workspace. Back up expenses.json if the records matter, keep the workspace private, and check record IDs carefully before using delete because deletion is immediate.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation describes capabilities to read and write local JSON files and invoke Python scripts via shell commands, but no corresponding permissions are declared. This creates a transparency and policy-enforcement gap: users or a hosting platform may grant or assume fewer privileges than the skill actually needs, increasing the chance of unintended file access or execution.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill documents a delete command for records without any warning, confirmation step, or recovery guidance. In a finance-tracking context, accidental or automated deletion can destroy personal bookkeeping data and undermine report accuracy, especially because the storage is a single local JSON file.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal