ClawHub
Back to skill

Security audit

tax-doc-collector

Security checks across malware telemetry and agentic risk

Overview

This is a coherent local tax-expense tracker, but users should know it stores sensitive tax records in a local JSON file and deletions are immediate.

Before installing, understand that your tax and expense details will be saved locally at ~/.tax_docs.json. Keep that file backed up and protected, avoid using it on shared accounts unless filesystem permissions are appropriate, and be careful with the delete command because it removes expense records immediately.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
86% confidence
Finding
The skill documentation describes persistent local file storage in `~/.tax_docs.json` and implies read/write access, but no permissions are declared. For a finance and tax tool, this creates a meaningful trust and transparency gap because the skill handles sensitive personal financial data and could read or modify local files without the user being clearly informed through a permission model.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The tool stores sensitive financial and tax-related records in a predictable file under the user's home directory with default file handling and no privacy notice, permission hardening, encryption, or retention controls. In the context of a tax document collector, this increases risk because the stored data can include merchants, notes, mileage, and deduction details that may expose personal or business financial information if the host is shared, backed up insecurely, or otherwise accessed by another local process or user.

Missing User Warnings

Medium
Confidence
80% confidence
Finding
The delete command permanently removes expense records immediately when given an ID, without confirmation, undo support, or an irreversible-action warning. In a tax-records application, accidental or scripted deletion can cause loss of audit-supporting documentation and incomplete tax reports, which is especially problematic because these records may be needed later for compliance or disputes.

VirusTotal

49/49 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.