ClawHub
Back to skill

Security audit

Monthly Financial Report

Security checks across malware telemetry and agentic risk

Overview

This skill does what it claims: it turns a user-provided monthly finance Excel workbook into local report files and an optional platform download link.

Use this only with financial workbooks you are allowed to process in the current workspace. Expect generated .md, .docx, and .json files to remain on disk, and treat any produced Word download link as sensitive.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
94% confidence
Finding
The skill instructs the agent to install packages, execute Python, write output files, inspect environment variables, and construct download links, but it declares no corresponding permissions. This mismatch is dangerous because it hides meaningful execution capabilities from the platform’s permission model and reviewers, increasing the risk of unauthorized file writes, unintended network/package-fetch activity, or misuse of environment-derived secrets in a high-trust financial workflow.

Context-Inappropriate Capability

Medium
Confidence
88% confidence
Finding
The script reads deployment environment variables and uses them to construct a public download URL for the generated report file. In the context of monthly financial reporting, this expands the skill from local document generation into publication/link-generation of sensitive financial outputs, which can expose confidential data if the URL is surfaced to users, logs, or downstream systems without explicit authorization or scoping checks.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The script persists generated markdown, DOCX, and JSON files containing financial report content to disk by default, including the full report text and discovered metrics. For a skill processing financial data, silent local persistence increases confidentiality risk because sensitive outputs may remain on shared workspaces, backups, or be accessed later by other users or processes.

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The code constructs a downloadable public URL for the generated Word report from environment-derived deployment metadata without clearly warning the user that the report may become externally retrievable. Because the report contains financial information, even indirect exposure through shareable URLs can materially increase the chance of unauthorized disclosure.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.