ClawHub
Back to skill

Security audit

Sina Market (GSAgent)

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Sina Finance market lookup skill that sends requested symbols to Sina endpoints and shows no hidden persistence, credential access, or unrelated behavior.

Before installing, understand that symbols you ask it to check will be sent to Sina Finance public web endpoints. It is appropriate for market-data lookup, but not for private trading instructions or sensitive account information.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
84% confidence
Finding

The skill appears to require network access and file reads, but the manifest does not declare any explicit tool scope such as permissions or allowed-tools. This creates a least-privilege and transparency problem: an agent or reviewer cannot easily verify what capabilities the skill is expected to use, increasing the risk of unintended data access or network use if the runtime grants broad defaults.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

This code file performs HTTP requests to external services via urlopen, transmitting user-supplied symbols and standard request headers. The file contains no confirmation prompt, user-facing notice, or explicit warning that invoking commands will contact third-party Sina endpoints.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Low
Category
Not specified by scanner
Confidence
83% confidence
Finding

The manifest describes user-oriented market lookup functions such as quotes, page metadata, code validation, and unified inspection workflows. The additional coverage-test command is an internal diagnostic/testing capability that batches symbols and summarizes backend availability modes, which is not part of the stated end-user purpose.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.