ClawHub
Back to skill

Security audit

跨市场交易终端

Security checks for vulnerabilities and agentic risk

Overview

This skill describes live cross-market trading and account/API-key use but does not give enough guardrails for financial actions.

Review this carefully before installing. Use only paper-trading or read-only API keys unless you intentionally want live trading, keep secrets out of chats and logs, restrict API permissions, and require explicit confirmation for any order placement or account-changing action.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Intent-Code Divergence

Medium
Confidence
88% confidence
Finding
The document asserts that risky code and external references were removed, yet later sections still require external APIs, API keys, and executable setup steps. This creates a misleading trust signal that can cause users or agents to under-estimate operational risk and handle credentials or live integrations without appropriate caution.

Vague Triggers

Medium
Confidence
78% confidence
Finding
The activation text is broad and underspecified, which can cause an agent to invoke the skill for loosely related finance or crypto requests outside a safe, intended scope. In a trading context, ambiguous activation raises the chance of unexpected API use, unsafe recommendations, or progression toward live account actions without clear user intent.

Missing User Warnings

High
Confidence
94% confidence
Finding
The skill describes cross-market trading, multi-account management, and automated trading behavior without prominent warnings that these capabilities can affect real broker/exchange accounts. In this context, omission of a live-trading warning is dangerous because users or agents may treat outputs as low-risk analysis when they could drive real financial actions with immediate monetary loss.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The setup instructions tell users to configure API keys and execute commands, but do not warn that these are sensitive secrets or that command execution can affect the host environment and connected accounts. Given that the skill advertises broker/exchange API integration and includes the exec tool, this omission materially increases the chance of credential leakage, overprivileged configuration, or unsafe execution.

Static analysis

No suspicious patterns detected.