ClawHub
Back to skill

Security audit

Oracle-X BIST

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent Turkish-market research helper that calls a disclosed Oracle-X data server or public market-data sources, without hidden credential use or destructive behavior.

Install this only if you want an agent to answer Turkish-market finance questions and, when ORACLE_X_URL is set, query that Oracle-X instance. Use a trusted instance because ticker lookups and scan requests will be visible to whoever operates it; the skill itself does not request personal tokens or trading-account access.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (8)

Ae1

High
Category
analysis-evasion
Content
`references/endpoints.md` before calling.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Ae1

High
Category
analysis-evasion
Content
`references/endpoints.md` before calling.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

Ae1

High
Category
analysis-evasion
Content
`references/endpoints.md` before calling.
Confidence
100% confidence
Finding
Referenced artifact was not completely inspected

External Script Fetching

High
Category
Supply Chain
Content
```bash
BASE="${ORACLE_X_URL:-http://localhost:8000}"
JOB=$(curl -sf -X POST "$BASE/api/bist/radar/scan" \
       -H 'Content-Type: application/json' -d '{}' | python3 -c 'import json,sys;print(json.load(sys.stdin)["job_id"])')

curl -sf "$BASE/api/bist/radar/jobs/$JOB"     # poll until status is done
Confidence
90% confidence
Finding
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
Poll at a few seconds, not in a tight loop, and read `GET /api/bist/radar`
first — if a recent scan answers the question, starting another one wastes the
instance's time. `DELETE /api/bist/radar/jobs/{job_id}` cancels a run.

## When something goes wrong
Confidence
80% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Tool Parameter Abuse

High
Category
Tool Misuse
Content
Poll at a few seconds, not in a tight loop, and read `GET /api/bist/radar`
first — if a recent scan answers the question, starting another one wastes the
instance's time. `DELETE /api/bist/radar/jobs/{job_id}` cancels a run.

## When something goes wrong
Confidence
80% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

External Transmission

Medium
Category
Data Exfiltration
Content
```bash
BASE="${ORACLE_X_URL:-http://localhost:8000}"
JOB=$(curl -sf -X POST "$BASE/api/bist/radar/scan" \
       -H 'Content-Type: application/json' -d '{}' | python3 -c 'import json,sys;print(json.load(sys.stdin)["job_id"])')

curl -sf "$BASE/api/bist/radar/jobs/$JOB"     # poll until status is done
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Natural-Language Policy Violations

Low
Confidence
86% confidence
Finding
The text states 'Only the Turkish market is here' and frames the entire skill around Borsa İstanbul, which is a locale-specific constraint expressed in natural language. Under the policy rule, locale restrictions should either offer user choice or be explicitly documented as a justified region-specific constraint; this file states the restriction but does not clearly present it as an opt-in or compliance-driven limitation.

Static analysis

No suspicious patterns detected.