ClawHub
Back to skill

Security audit

Robinhood Agentic

Security checks for vulnerabilities and agentic risk

Overview

This is a clearly disclosed Robinhood MCP trading client, with sensitive financial access but no hidden or purpose-mismatched behavior found.

Install this only if you intentionally want an agent to access Robinhood Agentic Trading. Use a separately funded Agentic account, review orders before placing them, protect or delete the local token file when access is no longer needed, and revoke agent access in Robinhood settings if you lose trust in the environment.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The client persists OAuth access and refresh tokens to a local JSON file, which creates credential exposure risk if the host is multi-user, backed up insecurely, or compromised. Although the code sets file mode 0600, it gives no explicit warning or consent prompt before storing highly sensitive brokerage credentials on disk, which is especially important given this skill can place trades through Robinhood.

Static analysis

No suspicious patterns detected.