ClawHub
Back to skill

Security audit

The AI Agent FinOps Playbook: Budget Enforcement, Cost Allocation & Spend Analytics for Multi-Agent Systems

Security checks across malware telemetry and agentic risk

Overview

This non-executing guide is mostly coherent, but its examples can change live billing, webhook, and API-key state while the sandbox guidance is inconsistent.

Review before using. Treat the snippets as capable of affecting live accounts unless you explicitly switch them to a sandbox endpoint and test credentials. Do not run deposits, webhook registration, key rotation, or emergency revocation examples in production without confirming amounts, endpoints, key scopes, recipients, and rollback steps.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Confidence
93% confidence
Finding
The text describes a zero-downtime key rotation flow, but the implementation never updates dependent agents or configuration to use the newly issued key before rotating the old one. In practice this can break clients unexpectedly, causing outages or failed emergency rotations at the moment an operator believes the system is protected.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The webhook patterns transmit agent identifiers, budget consumption, and operational state to external endpoints without clearly warning about data disclosure, retention, or third-party exposure. In a real deployment this can leak sensitive business telemetry to externally hosted receivers, logs, chat systems, or incident tooling.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:1475