ClawHub
Back to skill

Security audit

销售税查询(免费版)

Security checks for vulnerabilities and agentic risk

Overview

This sales-tax lookup skill is not malicious, but it should be reviewed because it sends address/location data and an API key to a third-party service while using overly broad activation and capability wording.

Install only if you are comfortable sending tax lookup inputs such as addresses, ZIP codes, or coordinates to zip-tax.com. Keep ZIPTAX_API_KEY out of repositories and frontend code, avoid using sensitive customer addresses unless you have permission, and consider narrowing the skill's activation text before use so it only runs for explicit sales-tax lookup tasks.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
70% confidence
Finding
An overly broad activation description can cause the agent to invoke this skill in contexts far beyond tax lookup, increasing the chance that user data is unnecessarily sent to the external API or that the tool runs when a safer/local alternative would suffice. In an agent ecosystem, ambiguous routing materially expands the skill's attack surface and can create privacy and misuse risks.

Vague Triggers

Medium
Confidence
82% confidence
Finding
The declared keyword coverage is excessively broad and includes generic terms like code generation, debugging, deployment, and fragmented phrases, which can lead to unintended auto-selection of this skill. That is dangerous because it may route unrelated prompts into a tool that performs network calls and requests API-key-backed access to a third-party service.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill takes precise address, ZIP, and geolocation inputs and sends them to an external API, but it does not prominently warn users about that data transfer. Location and address data are sensitive, so lack of disclosure can lead to privacy violations, policy noncompliance, or accidental exfiltration of personal or customer information.

External Transmission

Medium
Category
Data Exfiltration
Content
exit 1
fi
# ...
API_URL="https://api.zip-tax.com/request/v60"
# ...
# 解析参数
while [[ $# -gt 0 ]]; do
Confidence
90% confidence
Finding
The skill explicitly transmits user-supplied query data and an API key to a third-party endpoint. External transmission is expected for this tool's purpose, but it is still security-relevant because it exposes address/location information and secrets to a remote service and creates dependency on that service's handling and transport security.

Static analysis

No suspicious patterns detected.