ClawHub
Back to skill

Security audit

Skill Earnings Tracker

Security checks for vulnerabilities and agentic risk

Overview

This skill mostly does what it says, but it stores and exports earnings records in plaintext while claiming the data is encrypted.

Review this skill before installing if you plan to track real earnings, credits, customer information, or private notes. Treat ~/.openclaw/earnings and exported reports as plaintext files, avoid entering secrets or personal data in notes, and protect or delete exports manually.

A.I.G

Vulnerability Patterns
  • Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T09 · Insecure Skill Coding Practices

Warning
Location
scripts/skill_earnings_tracker.py:19
Finding

Plaintext Storage of Earnings Data Contrary to Encryption Claims

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Behavioral ASTexec() Call, eval() Call, Dynamic Import
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Session Persistence

Medium
Category
Rogue Agent
Confidence
60% confidence
Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 163)May include surrounding context.

md
### Month 2+: Scale
- Cross-promote on social
- Create companion skills
- Consider premium tier

## Security & Privacy

subprocess module call

Medium
Category
Dangerous Code Execution
Confidence
70% confidence
Finding

subprocess module calls execute external commands. Without careful input validation, this enables command injection.

Content

Scanner excerpt · scripts/skill_earnings_tracker.py (reported line 173)May include surrounding context.

python
import subprocess
    
    try:
        result = subprocess.run(
            ["clawhub", "explore", "--limit", "100"],
            capture_output=True,
            text=True

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
89% confidence
Finding

The skill explicitly describes persistent local storage of earnings data and an export function, but it does not clearly warn users that these files may contain sensitive business information and will remain on disk unless manually protected or deleted. While the data is not obviously high-risk personal data, marketplace revenue, usage, and portfolio information can still be sensitive and may be exposed through weak filesystem permissions, backups, or accidental sharing of exported files.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.