ClawHub
Back to skill

Security audit

财报解读

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only financial statement analysis skill with no executable code, hidden access, or automatic actions found.

Safe to install from a security perspective based on the reviewed artifacts. Treat its outputs as educational financial analysis, not investment advice, and avoid entering confidential financial data unless you trust the runtime environment.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.