ClawHub
Back to skill

Security audit

Fund Proposal Assistant

Security checks for vulnerabilities and agentic risk

Overview

This is a fund-proposal writing helper with a visible, optional script that creates local dated reports and document copies when the user runs it.

Safe to install for proposal writing and review. Before running `daily_check.py`, inspect or edit the hard-coded paths and filenames, keep backups of important proposal documents, and run it only when you want dated local reports and Word copies created.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
83% confidence
Finding
The skill advertises operational behavior that reads and writes local files via an auxiliary script, but it declares no permissions or user-consent boundary for those capabilities. That creates an authorization gap: users and the platform may treat the skill as text-only while it can materially modify local workspace contents.

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding
The documented behavior goes beyond a writing assistant into automated filesystem traversal, document copying, report generation, and deadline-driven batch processing, none of which is clearly surfaced in the top-level description. This mismatch can mislead users into invoking a seemingly harmless drafting skill that silently performs broader local actions, increasing the risk of unintended data exposure or modification.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The markdown tells users to run a script that creates dated Word copies and markdown reports, but it does not clearly warn that files and directories will be written to disk. Even if the writes are expected, lack of notice reduces informed consent and can cause accidental overwrites, clutter, or leakage into sensitive local folders.

Static analysis

No suspicious patterns detected.