ClawHub
Back to skill

Security audit

Tax Calculator Cn

Security checks across malware telemetry and agentic risk

Overview

This skill mostly contains a real Chinese tax calculator, but it also bundles an unrelated financial-tracking script that is under-disclosed and writes local history.

Review before installing. If you only need a Chinese tax calculator, verify the installed command uses scripts/tax.sh and avoid entering transaction details into scripts/script.sh unless you are comfortable with local history being written under your user data directory.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Intent-Code Divergence

Medium
Confidence
94% confidence
Finding
The script presents itself as a financial tracking and analysis tool, but the commands largely emit placeholder output and do not implement the advertised accounting behavior. In a security-sensitive financial context, this is dangerous because users may rely on incorrect or nonexistent recordkeeping, exports, balances, and summaries, leading to data loss, false decisions, or misplaced trust in the tool.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The helper function writes user activity to a persistent history file under the user's data directory without any clear disclosure, consent, retention policy, or permission hardening. Because this tool handles financial context, even command names and arguments can reveal sensitive spending behavior, transaction descriptions, or alert targets to other local processes or users depending on filesystem configuration.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.