ClawHub
Back to skill

Security audit

my skill

Security checks for vulnerabilities and agentic risk

Overview

This is a simple A-share market data and technical-analysis skill with disclosed Eastmoney data access and no code, persistence, credentials, or local-system authority.

Install only if you are comfortable with the agent visiting Eastmoney quote pages for the stock codes you ask about. Treat any MA, RSI, or MACD buy/sell wording as informational technical-analysis output, not personalized financial advice or a substitute for independent research.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill presents technical-analysis outputs as buy/sell signals such as '金叉买入信号' and 'DIF上穿DEA：买入信号' without any caution that these are heuristic indicators, not reliable financial advice. In an investment context, this can mislead users into treating the skill's output as actionable trading guidance, increasing the risk of financial harm or inappropriate reliance.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill clearly instructs the agent to access an external website (东方财富网) to retrieve stock data, but the description does not explicitly warn users that third-party web access will occur. This reduces transparency and informed consent, especially in environments where external browsing or data egress may matter for privacy, policy, or operational reasons.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.