ClawHub
Back to skill

Security audit

Xero

Security checks for vulnerabilities and agentic risk

Overview

This skill provides a disclosed Xero connector workflow with financial read/write capability, and its sensitive actions are purpose-aligned and explicitly require confirmation.

Install only if you intend Codex to access your Xero data through OOMOL. Review write requests carefully, especially invoice/contact creation or invoice status updates, and confirm the exact payload before allowing changes.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill description says to use this skill for ANY Xero request and instead of calling the API directly, which is an overly broad routing rule. This can cause an agent to invoke a state-changing integration too eagerly, increasing the chance of unintended reads or writes to financial data without sufficient task-specific validation or safer alternatives.

Static analysis

No suspicious patterns detected.