ClawHub
Back to skill

Security audit

Finance Compliance Audit

Security checks for vulnerabilities and agentic risk

Overview

This skill is a static financial compliance audit helper with templates and checklists, not code that runs commands or accesses data by itself.

Before installing, users should treat outputs as draft compliance aids, verify regulatory references against current official sources, and avoid pasting unnecessary personal, customer, or confidential business data unless it is masked and needed for the audit task.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger list includes broad enterprise terms such as 'risk management', 'internal control', and 'audit report', which can cause the skill to activate in unrelated business conversations. In an enterprise setting, over-broad activation can expose sensitive compliance-oriented prompts, influence unrelated workflows, or cause the agent to solicit regulated or confidential information unnecessarily.

Natural-Language Policy Violations

Low
Confidence
84% confidence
Finding
The phrase "中文触发词（优先）" indicates a language preference policy favoring Chinese triggers, which can be interpreted as prioritizing one language without explicit user choice. Although the document is bilingual, it does not clearly state that users may choose either language equally.

Static analysis

No suspicious patterns detected.