ClawHub

finance_monitor

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a finance data collector, but its documentation and metadata conflict about data sources, API-key needs, persistence, and local storage.

Install only if you are comfortable using Finnhub rather than a keyless CNBC-only workflow. Treat the Finnhub key as a real credential, avoid putting it directly in crontab, review where the SQLite database and logs are stored, and enable scheduled execution only after confirming the cadence, retention, and cleanup behavior.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill documentation indicates network access and local file/database writes, but the manifest does not declare corresponding permissions or capabilities. This mismatch undermines trust and reviewability because operators may approve the skill based on incomplete metadata while it still performs outbound requests and persistent local writes.

Description-Behavior Mismatch

Medium
Confidence
97% confidence
Finding
The manifest says the skill scrapes CNBC and needs no API key, but the instructions require users to obtain and provide a Finnhub API key. This is a security-relevant inconsistency because it can mislead users into disclosing credentials to a skill they believed was keyless and using a different data source.

Intent-Code Divergence

Medium
Confidence
96% confidence
Finding
The security and usage sections describe authenticated Finnhub-based operation even though the skill metadata advertises CNBC-only, no-key behavior. Contradictory operational instructions reduce auditability and increase the chance of unsafe deployment decisions, including unnecessary secret handling and use of an undeclared third-party service.

Session Persistence

Medium
Category
Rogue Agent
Content
```bash
# 编辑 crontab
crontab -e

# 添加（每小时整点执行）
0 * * * * cd ~/finance && FINNHUB_API_KEY=你的key /usr/bin/python3 fetch_data.py --db-path ~/finance/finance.db >> ~/finance/fetch.log 2>&1
Confidence
84% confidence
Finding
crontab -e

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal