ClawHub
Back to skill

Security audit

quarterly-tax-ranger

Security checks for vulnerabilities and agentic risk

Overview

This offline budgeting skill has no hidden access or automatic financial actions, but verified calculation errors make its penalty-free payment claims unreliable.

Use only for rough budgeting. The advisory calculation concerns are supported, despite the clean static security scan; they do not establish unauthorized access or malicious execution. Verify payment amounts and eligibility using [IRS Form 1040-ES](https://www.irs.gov/pub/irs-pdf/f1040es.pdf) and [Form 2210 Schedule AI](https://www.irs.gov/pub/irs-pdf/f2210.pdf), or a qualified tax professional, before acting.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing prior-year tax produces a zero-dollar safe harbor with an unsupported assurance of no penalty.

Medium
Category
Excessive Agency
Confidence
99% confidence
Finding

An omitted --prior-tax value is converted to zero, producing a zero-dollar quarterly schedule followed by an unconditional 'WITHOUT penalty' assurance. Missing information does not establish eligibility for a zero-payment safe harbor, and this tax-planning context makes the misleading assurance consequential: users could skip required payments and incur penalties.

Content

No source excerpt is available for this finding.

The advertised Schedule AI mode uses calendar-day proration instead of the Form 2210 annualized-income installment method.

Medium
Category
Excessive Agency
Confidence
99% confidence
Finding

The code annualizes cumulative income by calendar days and prorates the resulting tax, rather than implementing Form 2210 Schedule AI's prescribed annualization factors, installment percentages, and reconciliation rules. Because the skill explicitly presents these outputs as Schedule AI payment amounts for uneven income, users could rely on incorrect installments and incur underpayment penalties or unnecessarily large payments.

Content

No source excerpt is available for this finding.