ClawHub
Back to skill

Security audit

My finance agent

Security checks across malware telemetry and agentic risk

Overview

This expense-tracking skill does ordinary local CSV reporting, but its Google Drive credential and storage claims do not match the shipped code clearly enough for sensitive financial data.

Review before installing. Do not provide Google Drive credentials unless the publisher adds a clear, scoped Drive implementation. Treat expense entries as locally retained CSV data, avoid entering confidential financial details unless local storage is acceptable, and choose explicit export paths carefully.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill documentation indicates it writes expense data to a CSV file, but no explicit permissions are declared for that capability. Undeclared write access is risky because it reduces transparency for users and reviewers and can enable data persistence or modification beyond what is clearly consented to. In a finance-related skill handling company expense data, hidden or implicit storage behavior increases sensitivity.

Tp4

High
Category
MCP Tool Poisoning
Confidence
93% confidence
Finding
The documented behavior says data is persisted to Google Drive, but the file also states persistence is to a local CSV by default and exposes an additional DataFrame output mode not reflected in the high-level description. This mismatch is dangerous because users may make trust and data-handling decisions based on incorrect storage assumptions, potentially exposing sensitive company financial records to unintended local storage or bypassing expected cloud controls.

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The skill handles company expense data and persists it to CSV/local storage and potentially Google Drive, but the description does not prominently warn users that potentially sensitive financial data will be stored. Missing disclosure is risky because users may provide confidential descriptions, amounts, or categories without understanding retention, sharing, backup, or exposure implications.

VirusTotal

No VirusTotal findings

View on VirusTotal