ClawHub
Back to skill

Security audit

CRS Tax Calculator

Security checks across malware telemetry and agentic risk

Overview

The skill appears to perform its stated tax-document audit function, but it sends sensitive financial documents to a remote API with incomplete disclosure and consent controls.

Install only if you are comfortable sending complete tax or brokerage documents to the stated third-party service. Confirm the API destination, retention policy, logged metadata, and API-key handling before use, and avoid submitting documents containing data you are not authorized to share.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill requires an API key and instructs the agent to invoke a local Python script that sends user-provided financial documents to a remote service, but it does not clearly declare corresponding permissions despite having environment-variable and network capabilities. This creates a trust and review gap: users or platforms may not realize the skill can access sensitive credentials and exfiltrate highly sensitive tax/brokerage documents to an external domain.

Intent-Code Divergence

Low
Confidence
84% confidence
Finding
The skill claims uploaded files are 'immediately discarded' and 'not stored,' yet separately states the server records processing logs including file names, page counts, and timing. Even if content is not retained, this is still data retention, and the contradiction can mislead users about what sensitive metadata is preserved and for how long.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The script base64-encodes and uploads local broker statements, which can contain highly sensitive financial and personal data, to a remote API without an explicit privacy warning, consent step, or clear disclosure of what leaves the machine. In a tax-audit context this is more dangerous because users may assume a local processing utility while the tool actually transfers complete source documents off-host.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.