ClawHub
Back to skill

Security audit

企业股权穿透

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward enterprise equity-query skill with disclosed API-token use and external Qixin API calls, with dependency hygiene cautions but no hidden or destructive behavior found.

Install only if you are comfortable providing a Qixin API token and sending queried company names or enterprise IDs to Qixin's external API. For legal, investment, or compliance use, prefer enterprise ID lookup or verify the returned company name because fuzzy name matching may select the wrong entity. A pinned, updated axios version with a lockfile would improve reproducibility and dependency security.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Unpinned Dependencies

Low
Category
Supply Chain
Content
"author": "",
  "license": "MIT",
  "dependencies": {
    "axios": "^1.6.0"
  },
  "devDependencies": {
    "@types/node": "^20.0.0",
Confidence
89% confidence
Finding
Using a caret range for axios allows automatic installation of newer minor/patch releases, which reduces build reproducibility and can unexpectedly introduce breaking or vulnerable transitive code. In a network-enabled skill, dependency drift increases supply-chain risk because behavior may change between installs without review.

Known Vulnerable Dependency: axios==1.6.0 — 10 advisory(ies): CVE-2025-62718 (Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF); CVE-2026-42044 (Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `pars); CVE-2026-25639 (Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig) +7 more

High
Category
Supply Chain
Confidence
97% confidence
Finding
The manifest permits axios 1.6.0, which is flagged with multiple advisories including SSRF-related proxy bypass and denial-of-service/prototype-pollution issues. Because this skill is designed to query external enterprise data sources over HTTP, a vulnerable HTTP client is especially relevant: malformed responses, hostile proxy environments, or attacker-influenced request handling could increase exposure.

Static analysis

No suspicious patterns detected.