ClawHub
Back to skill

Security audit

Tax Package Preparation

Security checks for vulnerabilities and agentic risk

Overview

This skill describes a tax-package workflow that uses sensitive financial data, but the access and local outputs are disclosed and aligned with its purpose.

Install only in an environment appropriate for confidential client tax records. Review where the generated workbook and .cache/tax-package-prep snapshots will be stored, prefer a secured output directory over a shared Desktop, and make sure QBO credentials are already managed with least privilege.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill handles highly sensitive financial and tax data from QBO and client SOP files, and explicitly writes outputs to a desktop location plus a local cache, but it does not clearly warn the user about this data handling, storage, or exposure risk. In a tax workflow, omission of privacy and storage warnings can lead to inadvertent disclosure of PII, financial records, crypto/FBAR indicators, and other regulated data on shared machines or improperly protected environments.

Skill Enumeration

Medium
Category
Agent Snooping
Content
- **Pipeline:** `scripts/pipelines/tax-package-prep.py`
- **CDC Cache:** `.cache/tax-package-prep/{slug}-{year}.json`
- **Output:** `~/Desktop/TaxPackage_{slug}_{year}.xlsx` (or `--out` dir)
- **Skill:** `skills/tax-package-prep/SKILL.md`

## Notes
Confidence
80% confidence
Finding
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Static analysis

No suspicious patterns detected.