ClawHub
Back to skill

Security audit

financial roe analysis

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only financial analysis skill that stays focused on public company ROE analysis and does not add code, persistence, credential use, or destructive behavior.

Install this if you want structured ROE/DuPont financial analysis from public company data. Be aware it may activate on broad finance questions and appears designed primarily for Chinese-language reports; its outputs should be treated as financial analysis, not investment advice.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger list includes broad natural-language phrases such as '财务分析', '财务报告', '分析某公司', and '某股票怎么样（财务角度）', which can match many ordinary user requests and cause the skill to activate unintentionally. In a finance context, unintended activation can steer conversations into regulated or sensitive analysis workflows, increase data-fetching or tool usage, and override a more appropriate general-response path.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

This markdown file is entirely written as a mandatory instruction set in Chinese, beginning with the title at L001 and continuing throughout, without any indication that users may choose another language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is clearly documented and justified, which is not present here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
96% confidence
Finding

The title and all formatting instructions are written as a Chinese-only report template, indicating the skill is intended to force a specific language/locale. The file does not provide any user opt-in, alternative language option, or justification for a locale-specific restriction.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

This markdown file contains extensive natural-language instructions solely in Chinese, including repeated mandatory wording such as '必须' and '禁止', but it does not offer the user an opt-in language choice. Under the policy, forcing a specific language without user choice can constitute a locale or language policy violation unless the constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.