ClawHub
Back to skill

Security audit

SAP FICO Expert - Australia

Security checks for vulnerabilities and agentic risk

Overview

This is an Australia-specific SAP finance guidance skill with no executable or persistent behavior, but users should verify current compliance details before relying on it.

Install this only if you want SAP FI/CO guidance for Australian organisations or Australian subsidiaries. Treat the tax, superannuation, banking, OSS note, and compliance content as implementation guidance that must be checked against current SAP documentation, ATO guidance, and your organisation's controls before production use.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (8)

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
88% confidence
Finding

The skill globally frames itself as an Australian SAP FICO expert and instructs responses to include Australian compliance context for every answer, without stating that this should only apply when the user is operating in Australia or explicitly asks for Australian localization. This can cause the model to give jurisdiction-specific tax, payroll, banking, and compliance guidance that is incorrect for users in other regions, creating a meaningful risk of misconfiguration or regulatory error.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The auto-activation list contains several broad or ambiguous terms such as 'asset', 'depreciation', 'closing', 'variance', and generic SAP words that may appear in contexts outside the intended FI/CO Australia scope. This can cause the skill to trigger unexpectedly, exposing users to domain-specific guidance when they did not request it and increasing the chance of irrelevant or misleading assistance in adjacent contexts.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The instruction fixes the assistant's language style to English with Australian business terminology, which is a locale constraint expressed in natural language. The file does not offer the user any language or locale choice, so it can conflict with organizational language/locale flexibility policies.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

This line instructs the skill to use Australian business terms where relevant, such as GST instead of VAT, without any opt-in or fallback for users in other locales. That is a natural-language locale policy issue because it imposes a regional terminology choice by default.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
84% confidence
Finding

This markdown file is entirely scoped to Australian banking, including AUD currency, AU bank country, and Australian payment networks, but it does not explicitly state that it is a region-specific reference or that users should opt into this locale-specific guidance. Under the policy rule, forcing a specific locale without user choice or clear justification can be a natural-language policy concern.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The description states the examples calibrate SAP FICO expert behavior specifically for the Australian context. Under the policy, locale-specific behavior should either offer user choice or clearly justify the constraint; this file does not indicate user opt-in or explain why the skill must enforce that locale.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The manifest sets the skill language to "en-AU," which may be acceptable for regional specialization, but the response schema also mandates output language as "en-AU" without stating that users can choose another language or locale. This creates a natural-language locale restriction that is not presented as optional.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The field "format_language": "en-AU" hard-codes a locale for all responses. Under the policy, forcing a specific language or locale without user choice can be a natural-language policy violation unless clearly documented as optional or justified.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.