ClawHub
Back to skill

Security audit

fx-converter

Security checks for vulnerabilities and agentic risk

Overview

This currency-converter skill does what it claims, with a disclosed external exchange-rate API and no evidence of hidden persistence, credential access, or destructive behavior.

Install this if you are comfortable with a command-line currency tool making live network requests to Frankfurter for exchange rates. It appears low risk, but users who need offline-only workflows or who do not want currency query pairs sent to an external API should avoid using live conversion.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill declares no permissions even though it clearly depends on shell execution and environment/tool access (`curl`, `python3`). This can mislead users and policy systems about what the skill is capable of doing, reducing transparency and weakening review controls around command execution.

Missing User Warnings

Low
Confidence
91% confidence
Finding
The description says the skill uses the Frankfurter API/ECB data source, but it does not clearly warn users that their query parameters are sent to an external third-party service. This is a transparency and privacy issue because user-entered currency pairs and amounts may be disclosed off-platform without explicit notice.

Static analysis

No suspicious patterns detected.