ClawHub
Back to skill

Security audit

Analytics And Advisory Intelligence

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed, read-focused accounting analytics helper, with one setup caution around installing jq using sudo.

Before installing, confirm you are comfortable with broad local access to client financial, compliance, correspondence, banking, and EFKA data for analytics. Install jq through your normal administrator or package-management process rather than letting a skill invoke sudo.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Chaining Abuse

High
Category
Tool Misuse
Content
```bash
export OPENCLAW_DATA_DIR="/data"
which jq || sudo apt install jq
```

No external credentials required. Analyzes financial data from local files to generate trend reports and advisory insights.
Confidence
75% confidence
Finding
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Anti-Refusal Statement

High
Category
Anti-Refusal
Content
insufficient_history:
    output: "{Client} has only {N} periods of data — trend analysis requires at least 3. Showing available data with LOW CONFIDENCE marker."
    action: "Produce what is possible, clearly labelled. Do not refuse to show anything."

  sector_too_small:
    output: "Sector benchmark for {sector} cannot be computed — only {N} clients (minimum 3 required). Showing own-history analysis only."
Confidence
85% confidence
Finding
Skill instructs the agent to never refuse or to always comply. Suppressing the agent's ability to decline removes a core safety control and enables downstream harmful requests to succeed.

Sudo/Root Execution

Medium
Category
Privilege Escalation
Content
```bash
export OPENCLAW_DATA_DIR="/data"
which jq || sudo apt install jq
```

No external credentials required. Analyzes financial data from local files to generate trend reports and advisory insights.
Confidence
95% confidence
Finding
The setup command conditionally invokes 'sudo apt install jq', which encourages privilege escalation and package installation on the host. Even though jq is a common utility, embedding sudo-based installation in a skill increases the risk of unintended root-level changes, expands the attack surface, and violates the skill's otherwise read-only posture.

Static analysis

No suspicious patterns detected.