Security audit

receipt-raccoon

Security checks across malware telemetry and agentic risk

Overview

The skill is a local, user-directed receipt parser and spending report tool, with the main privacy consideration being that saved receipt ledgers can contain sensitive spending history.

Before installing, treat any receipt input and JSONL ledger output as sensitive financial data. Store ledgers in a protected location, avoid committing them to shared repositories, and delete them when no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 91% confidence
Finding: The skill documentation describes file read and file write behavior (`--file receipt.txt`, appending to `receipts.jsonl`) but does not declare corresponding permissions. Undeclared data access/storage is a real security and transparency issue because receipt data often contains sensitive financial and location information, and users or platforms may not realize the skill persists that data locally.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill instructs users to append parsed receipts to a JSONL ledger without warning that receipts can contain sensitive personal and financial data, such as merchant history, spending patterns, dates, and potentially location clues. Omitting this privacy notice increases the chance that users store sensitive data insecurely or longer than intended.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.