Security audit

QuickBooks Mileage CSV

Security checks across malware telemetry and agentic risk

Overview

This appears to be a disclosed QuickBooks mileage CSV generator that may use calendar and email credentials, so it needs careful configuration but does not show hidden or malicious behavior.

Install only if you are comfortable giving it access to mileage, address, calendar or inspection data, distance APIs, and any configured email/OAuth credentials. Keep email disabled unless you intend to send reports, verify the configured recipient before running without --dry-run or --skip-email, and review run_report.md before using the CSV for bookkeeping or taxes.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 84% confidence
Finding: The skill metadata declares no permissions, yet the documented behavior clearly instructs running a local CLI that reads configuration/input records and writes generated CSV/report files. This creates a transparency and consent problem: users and platforms may underestimate what filesystem access the skill requires, making it easier to process or overwrite local data without appropriate review.

Tp4

High

Category: MCP Tool Poisoning
Confidence: 90% confidence
Finding: The skill description presents the operation as local-only generation, but the behavior includes optional cloud/email delivery and additional report generation. That mismatch is dangerous because users may provide sensitive business travel data under the assumption it remains local, while the underlying tool may transmit CSVs or reports through SMTP, Microsoft Graph, or Gmail APIs, causing unintended data exfiltration.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.