ClawHub
Back to skill

Security audit

Bill Manager

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only bill and budget organizer, with no executable code or automatic access to accounts, but users should avoid entering full financial identifiers.

Install only if you want a manual bill-tracking and budgeting template skill. Treat its finance fields as optional: use nicknames or last four digits only, and do not provide full account numbers, card numbers, banking credentials, or anything you would not want retained in chat history.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The skill description and metadata use broad finance-related trigger language such as bill management, expense tracking, reminders, analysis, and organizing household bills. This can cause the skill to activate for generic personal-finance conversations beyond its narrow intended scope, increasing the chance of unintended routing, over-collection of sensitive financial details, or overshadowing safer/general system behavior.

Vague Triggers

Medium
Confidence
94% confidence
Finding
The Usage section includes vague prompts like 'Help me track my spending' and 'How to save money', which are broad enough to match many ordinary finance queries. In a skill-selection system, these examples can expand routing far beyond bill organization into budgeting or financial-advice territory, causing accidental invocation and inappropriate handling of sensitive user data or requests outside the skill's stated limitations.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The template explicitly prompts for transaction-linked financial data such as payment account last 4 digits and transaction ID, but provides no guidance on minimizing, masking, or safely handling sensitive information. In a personal finance skill, this increases the chance users will enter real financial details that may later be stored, logged, or exposed unnecessarily.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The recurring bill template solicits account information, billing details, and reminder channels together, creating a consolidated set of sensitive personal and financial metadata without any privacy warning or restriction. Even though it is framed as a template, this context makes it more likely users will disclose real payment-account data that could be exposed through logs, prompt history, or integrations.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.