ClawHub
Back to skill

Security audit

Easyaccounts

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed EasyAccounts bookkeeping helper that can read and change your financial records, but I found no hidden or unrelated behavior.

Install only if you trust the EasyAccounts server you configure and want an assistant to manage that bookkeeping data. Configure EASYACCOUNTS_URL as the clean base host without /api, protect ~/.openclaw/.env and ~/.config/easyaccounts/token, review add/update/batch/transfer actions before allowing them, and remember that exported Excel files are stored on the EasyAccounts server for later retrieval.

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Confidence
96% confidence
Finding
The instructions conflict on whether `EASYACCOUNTS_URL` must include `/api`: one section says the agent should append `/api`, while a later section says the environment variable must be a clean base URL without any path and that `/api` is appended internally. This inconsistency can cause requests to be sent to unintended endpoints, leak credentials or tokens to the wrong route, or induce repeated failed retries against a front-end server instead of the API.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The export branch creates Excel reports on the server and reveals that the file is stored under a server-side directory for later retrieval. In a household finance skill, these files can contain sensitive transaction history, notes, and account metadata, so persisting them without explicit user consent, retention limits, or access controls increases the risk of unintended disclosure through shared hosts, backups, or operational access.

Static analysis

No suspicious patterns detected.