Klientenportal

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

Anyone using the skill is delegating access to a sensitive accounting portal account.

Why it was flagged

The skill uses the configured Klientenportal user ID and password to log into the tax/accounting portal.

Skill content

page.locator('input[type="text"]').first.fill(config["user_id"])
page.locator('input[type="password"]').first.fill(config["password"])

Recommendation

Use a dedicated account if available, keep the config file and environment variables private, and review portal activity if unexpected uploads or downloads occur.

Note

ASI02: Tool Misuse and Exploitation

What this means

A mistaken command or broad file pattern could upload the wrong accounting documents.

Why it was flagged

The skill can upload selected receipt or invoice files, including wildcard selections, to a specific accounting category in the external portal.

Skill content

python3 {baseDir}/scripts/klientenportal.py upload -f invoice.pdf --belegkreis KA
python3 {baseDir}/scripts/klientenportal.py upload -f *.xml --belegkreis SP

Recommendation

Confirm file paths and Belegkreis categories before upload, and avoid broad wildcards unless you have reviewed the matching files.

Note

ASI10: Rogue Agents

What this means

Portal session cookies may remain on disk after a task until logout or cleanup.

Why it was flagged

The browser profile is stored persistently under the skill's workspace directory, which can retain session state between runs.

Skill content

PROFILE_DIR = CONFIG_DIR / ".pw-profile"
...
return pw.chromium.launch_persistent_context(
        user_data_dir=str(PROFILE_DIR),

Recommendation

Run the documented logout command after use and protect or remove the local profile directory if the workspace is shared.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The skill depends on external automation tooling that should come from trusted package sources.

Why it was flagged

Setup instructs users to install Playwright and a browser runtime from external package/download sources.

Skill content

pip install playwright
playwright install chromium

Recommendation

Install from trusted package indexes or a controlled environment, and consider pinning Playwright versions for reproducible deployments.