ClawHub
Back to skill

Security audit

確定申告アシスタント

Security checks for vulnerabilities and agentic risk

Overview

This is a prompt-only Japan tax guidance skill with no executable code or external connections, but users should verify tax advice and avoid entering sensitive identifiers.

Reasonable to install for general Japan tax organization and learning. Treat calculations and deadline notes as guidance, verify current rules with the National Tax Agency or a tax professional before filing, and avoid entering My Number or unnecessary sensitive financial details into persistent notes.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The example trigger phrase「フリーランスの確定申告を手伝ってください」is broad and closely matches ordinary user requests, so it can cause this skill to activate in situations where the user did not explicitly intend to invoke it. In a tax-assistance context, accidental invocation can steer conversations into domain-specific guidance, increasing the risk of misrouting, confusion, or inappropriate reliance on generalized tax content.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file presents all headings and field labels exclusively in Japanese, which can impose a language choice on users without any visible opt-in or alternative. The policy requires flagging language or locale constraints when they are forced rather than offered as a user choice.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
86% confidence
Finding

The description and user-facing content are entirely in Japanese and branded with a Japan locale marker, but do not explicitly offer the user a language or locale choice. Because the policy asks to flag forced language/locale behavior unless it is opt-in or clearly documented as a justified regional tool, this is a natural-language locale-policy concern.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.