Security audit
Security checks for vulnerabilities and agentic risk
The skill is a documented TickDB financial data lookup helper that uses API keys and external requests as expected, with cautions around an automatic version check and an unpinned update command.
Install only if you are comfortable with the agent making TickDB API requests and, on first activation per conversation, checking ClawHub for the latest skill version. Provide formal API keys only when needed, avoid pasting keys into shared transcripts, and review any suggested `npx ... @latest` update command before running it.
The manifest/description is entirely specified in Chinese and presents the skill as operating through Chinese trigger phrases, without stating that users may interact in other languages. For a general market-data skill, this can constitute an unjustified locale/language constraint unless the user is given a language choice or the regional limitation is explicitly documented.
The activation condition says the skill triggers whenever the user mentions a long list of generic terms such as “价格”, “行情”, “利润”, “股东”, or “财经日历”. In a markdown/manifest description, this is too expansive and lacks clear boundaries or exclusion conditions, increasing the chance of unintended invocation during normal discussion rather than explicit API-use requests.
The skill mandates contacting clawhub.ai on every first activation in a conversation for version checks, even though that network call is unrelated to fulfilling financial data requests. This expands data exposure and creates an unnecessary third-party dependency that could leak usage metadata or become a control point for indirect influence over agent behavior.
The skill recommends running npx clawhub@latest install tickdb-market-data, which fetches and executes the latest package code without pinning a trusted version. If the package, publisher account, or dependency chain is compromised, users could execute attacker-controlled code during installation or upgrade.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
依据用户补充的接口截图及生产只读验证。本端点尚未包含在归档的原始 OpenAPI 文档包中；不能据此推断还有其他账户管理接口。
`GET https://api.tickdb.ai/v1/apikeys/subscriptions`
用途：查询当前认证账户下返回的 API Key 列表、套餐、状态及到期情况。使用用户提供的正式 Key，通过必填请求头 `X-API-Key` 认证；无需登录网页。不传查询参数或请求体。
The file includes prescriptive user-facing text in Chinese, such as the exact prompt to show for authentication failure, without indicating that the language should match the user's preference. This is a natural-language locale policy issue because it mandates a specific language rather than offering localization or user choice.
This markdown file contains user-facing natural-language instructions only in Chinese, which can amount to forcing a specific language without user opt-in. The file does not state that the skill is region-specific or provide an alternative language/locale option.
The skill describes an automatic version-check network call without clear user-facing disclosure at execution time. Silent outbound requests can violate least surprise and privacy expectations by transmitting conversation-context-derived usage metadata to a third party without explicit consent.
No suspicious patterns detected.