ClawHub

finance-reporter

Security checks across malware telemetry and agentic risk

Overview

This skill fetches public market prices from Yahoo Finance and can be manually or optionally scheduled, with no evidence of hidden credential use, local data access, destructive behavior, or undisclosed message-sending code.

Install only if you are comfortable allowing the script to query Yahoo Finance for the listed symbols and installing the Python requests dependency. Add the cron job only if you want recurring reports, and review any DingTalk/WeChat binding separately because messaging behavior depends on your configured OpenClaw integrations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill clearly performs network access to Yahoo Finance and can push data to DingTalk/WeChat, but no explicit permissions are declared in the manifest. This creates a transparency and consent gap: users or hosting platforms may not realize the skill can make outbound requests and transmit data on a schedule.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The documentation mentions scheduled execution and push support, but it does not prominently warn that enabling cron will cause automatic outbound delivery of financial data to DingTalk/WeChat. This can lead to unintended automated messaging, privacy issues, or operational surprises if users configure it without understanding the effect.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal