ClawHub
Back to skill

Security audit

账单伙伴

Security checks for vulnerabilities and agentic risk

Overview

This looks like a coherent local finance-recording skill, but it stores and modifies sensitive financial records with broad triggers and not enough upfront consent or retention guidance.

Install only if you are comfortable keeping financial records in the workspace. Before use, confirm where the files are stored, how to delete or correct entries, and avoid entering account numbers, full bank details, tax IDs, or other unnecessary identifiers. Use explicit commands for recording or reporting transactions, and review generated records before relying on them.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The README describes recording bills, fixed expenses, salaries, and generating monthly spending reports, but it does not warn users that the skill processes highly sensitive financial transaction data. This can lead users to share bank-transfer, salary, and household spending details without informed consent or understanding of privacy, retention, or access risks.

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger phrases are very broad and cover many ordinary finance-related utterances, making accidental or over-eager activation likely. In a skill that reads and writes local financial records, ambiguous activation can cause unintended creation, modification, or disclosure of sensitive personal data without sufficiently clear user intent.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The skill performs local file and directory creation, updates indexes, and modifies financial records, but the user-facing description does not clearly warn that persistent local financial data will be created and changed. This can lead to users unknowingly authorizing sensitive financial data storage and modification, increasing privacy and integrity risk.

Static analysis

No suspicious patterns detected.