ClawHub
Back to skill

Security audit

报销合规审核

Security checks for vulnerabilities and agentic risk

Overview

This skill handles reimbursement receipt checks through a scoped external API, and its sensitive data use is disclosed and bounded.

Install only if you are comfortable sending receipt images, OCR text, claim details, and reimbursement rules to the ai-skills.open-idea.net expense-compliance service. Use a dedicated product API key, review the provider's retention and deletion controls, and treat outputs as audit suggestions rather than payment approval, tax verification, or fraud determinations. Non-Chinese readers may need translation because the package documentation is Chinese-only.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Natural-Language Policy Violations

Medium
Confidence
93% confidence
Finding
The manifest description is entirely in Chinese and presents the skill's usage context in a single enforced language. Under the policy, language constraints should either offer user opt-in/choice or be clearly documented as region-specific and justified, which is not present here.

Natural-Language Policy Violations

Medium
Confidence
89% confidence
Finding
该文件整体以中文撰写 HTTP 使用说明，没有说明这是可选语言、可切换语言，或仅适用于特定中文区域用户。根据规则，若技能在自然语言层面强制特定语言且无用户选择或明确、合理的区域限定，应视为潜在语言/locale 策略违反。

Natural-Language Policy Violations

Medium
Confidence
96% confidence
Finding
The entire operational document is written only in Chinese and does not indicate that the skill is China-specific or that users may choose another language. This can violate a language/locale policy when skills impose a specific language without user opt-in or documented regional justification.

Static analysis

No suspicious patterns detected.