ClawHub

Norman: Categorize Transactions

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate bookkeeping skill, but it can change accounting records and the available evidence shows under-scoped safeguards around when and how those changes happen.

Review this before installing if it will connect to real books. It should only be used for explicitly requested transaction categorization or reconciliation, and users should confirm the applicable chart of accounts and review proposed changes before categories, invoice links, or verification flags are written.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The skill description is broad enough to trigger on many general bookkeeping or finance-related requests, which can cause the agent to invoke this capability in situations beyond simple transaction categorization. Because the skill can modify financial records by categorizing, linking, and verifying transactions, over-broad routing increases the risk of inappropriate autonomous actions on sensitive accounting data.

Natural-Language Policy Violations

Medium
Confidence
84% confidence
Finding
Mandating SKR04 as the bookkeeping category system without checking the user's jurisdiction, entity type, or accounting configuration can lead to systematic misclassification of transactions. In this context, the danger is heightened because the skill is designed to write categories directly into accounting records, so an incorrect default could propagate accounting errors and affect reconciliation, reporting, or tax preparation.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal