ClawHub
Back to skill

Security audit

金蝶云星空数据导出

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Kingdee ERP data exporter that handles sensitive business and financial data, so users should scope and protect exports carefully.

Install only where you are authorized to access the Kingdee tenant. Create config.py locally, keep it out of source control, use --org and --only to limit exports, choose a restricted --output-dir, and treat generated Excel files as sensitive financial records. Update the pinned requests dependency if your environment confirms the reported advisory applies.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Intent-Code Divergence

Medium
Confidence
80% confidence
Finding
The class name and runtime messaging describe a sales-data exporter, but the implementation exports broad financial, accounting, bank-account, and cash-position datasets. This scope mismatch can mislead operators or reviewers, increasing the chance that highly sensitive non-sales data is exported unintentionally under a narrower-seeming label.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The script writes large volumes of potentially sensitive ERP, financial, and banking data to local Excel files without strong user-facing warnings or protective defaults. In shared hosts or loosely controlled workstations, these files can persist unencrypted, be synced automatically, or be accessed by other users, causing confidentiality exposure.

Known Vulnerable Dependency: requests==2.32.5 — 2 advisory(ies): CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func); CVE-2026-25645 (Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract)

Medium
Category
Supply Chain
Confidence
90% confidence
Finding
The dependency pins requests to 2.32.5, and the provided advisory indicates versions prior to 2.33.0 are affected by an insecure temporary file reuse issue in extract_zipped_paths(). Even if this utility is not obviously used from requirements.txt alone, pinning a known vulnerable version is a real supply-chain risk because application code or transitive usage could trigger the vulnerable path.

VirusTotal

57/57 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Python code POSTs credential environment variables to an environment-controlled URL.

Critical
Code
suspicious.env_credential_access
Location
data_exporter.py:604