ClawHub
Back to skill

Security audit

statement-reconciliation

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrowly scoped AP statement reconciliation helper that reviews supplied financial records and drafts, but does not send, vendor requests.

Before installing, confirm your matching rules in plan mode and keep vendor communication as draft-only for human review, especially because the skill processes financial records.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.