ClawHub
Back to skill

Security audit

Nex Expenses

Security checks for vulnerabilities and agentic risk

Overview

This is a local Belgian expense tracker that stores sensitive receipt and expense data on disk, but its capabilities are disclosed and aligned with its purpose.

Install only if you are comfortable storing receipts, OCR text, and business expense records locally under ~/.nex-expenses. Review extracted OCR data and tax categories before relying on them, confirm add/edit/delete/export actions, and do not grant crypto or purchase authority if prompted because the skill does not need it.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
81% confidence
Finding
The trigger list includes broad phrases like 'business expense' and 'tax category' that can appear in ordinary conversation, making accidental activation more likely. In a skill that can create, modify, delete, and export persistent financial records, unintended invocation can lead to incorrect bookkeeping actions or disclosure of sensitive expense data.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
At the point where receipt scanning is introduced, the skill does not clearly warn that receipt images and extracted financial data will be stored on disk. Because receipts often contain sensitive business and personal information, insufficient upfront disclosure can cause users to expose or retain data they did not expect to be persisted.

Static analysis

No suspicious patterns detected.