ClawHub
Back to skill

Security audit

A股智能投资助手

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a disclosed market-data and notification helper, with no evidence of malware or hidden behavior, but users should review its network and scheduled-message behavior before enabling it.

Install only if you are comfortable with the skill contacting external market-data services and, if configured, sending scheduled notifications to Feishu or WeChat. Confirm any notification schedule and webhook/channel credentials yourself, and disable scheduled pushes when they are no longer needed.

SkillSpector

Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
95% confidence
Finding
The skill clearly performs network access through AkShare market-data APIs and explicitly references direct connections to external data sources and scheduled push delivery to Feishu/WeChat, yet no permissions are declared. This creates a transparency and policy-enforcement gap: users and the platform may not realize the skill can reach external services, fetch data, and send outbound messages on a schedule.

Static analysis

No suspicious patterns detected.