ClawHub
Back to skill

Security audit

AANA Financial Safety Router Skill

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only financial safety skill that adds caution, privacy minimization, and professional referral guidance without installing code or taking actions on its own.

Install this as a policy-style helper for financial conversations, not as a source of financial, tax, or legal advice. It is broad by design, so users should expect it to add caution or professional-referral language for many finance-related questions, but it does not itself access accounts, store data, run tools, or send information externally.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Low
Category
Not specified by scanner
Confidence
81% confidence
Finding

The manifest description says the skill provides 'financial safety router instructions' for broad categories like investment, tax, budgeting, debt, and purchase advice, but it does not specify concrete trigger phrases, scope boundaries, or negative examples. In a manifest file, this kind of wide-ranging description can create ambiguity about when the skill should activate versus when general financial discussion should not invoke it.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.