ClawHub
Back to skill

Security audit

DAX Ledger Skills

Security checks for vulnerabilities and agentic risk

Overview

This is a DAX Ledger API reference skill that can access sensitive financial, tax, and compliance data, but its behavior is disclosed and there is no hidden code, persistence, or destructive action.

Install only if you intend an agent to query DAX Ledger account data. Keep API credentials in a trusted secret mechanism, avoid pasting secrets into chat, and ask for only the portfolio, transaction, tax, or compliance fields needed for the task.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill explicitly enables access to highly sensitive financial and compliance data, including portfolios, transactions, tax reports, and address compliance results, but provides no user-facing warning, consent guidance, or handling restrictions. In an agent context, this increases the risk of over-collection, accidental disclosure, or use of sensitive data without the user clearly understanding the privacy implications.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The reference documents direct API-key/secret authentication and access to sensitive portfolio and compliance data without any warning about credential handling, storage, redaction, or the sensitivity of financial information. In an agent skill context, this raises the risk that secrets or regulated financial data could be requested, logged, surfaced to the model, or mishandled by downstream tooling.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The API reference exposes capabilities far beyond the skill's declared scope, including compliance, capital gains, fiscal, and other tax/reporting endpoints. This creates a scope-mismatch risk: an agent or user may invoke highly sensitive financial/compliance functions that were not clearly disclosed, increasing the chance of over-collection or unintended access to regulated data.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.