ClawHub
Back to skill

Security audit

Taxragflow

Security checks across malware telemetry and agentic risk

Overview

This skill coherently sends tax questions to a configured RAGFlow knowledge base, with no evidence of hidden persistence, destructive behavior, or unrelated data access.

Install only if you trust the configured RAGFlow server and can provide a limited-scope API key. Review the API URL carefully, avoid sending highly sensitive tax details unless that service's privacy controls are acceptable, and consider pinning dependency versions in controlled deployments.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Taint TrackingDirect Taint Flow, Variable-Mediated Taint Flow, Credential Exfiltration Chain
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Tainted flow: 'url' from os.getenv (line 28, credential/environment) → requests.post (network output)

Critical
Category
Data Flow
Content
payload["conversation_id"] = conversation_id

    try:
        response = requests.post(
            url,
            headers=headers,
            json=payload,
Confidence
92% confidence
Finding
response = requests.post( url, headers=headers, json=payload, timeout=60 )

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The manifest requests both code execution and network access, which are sensitive capabilities, but provides no user-facing disclosure about what will be executed, what remote systems will be contacted, or how user queries will be transmitted. In a tax knowledge skill, this expands the attack surface because user-provided tax questions may contain sensitive financial or personal data that could be sent externally or processed by shell commands without informed consent.

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
python-dotenv>=1.0.0
Confidence
97% confidence
Finding
requests>=2.28.0

Unpinned Dependencies

Low
Category
Supply Chain
Content
requests>=2.28.0
python-dotenv>=1.0.0
Confidence
96% confidence
Finding
python-dotenv>=1.0.0

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
94% confidence
Finding
requests

Known Vulnerable Dependency: python-dotenv — 1 advisory(ies): CVE-2026-28684 (python-dotenv: Symlink following in set_key allows arbitrary file overwrite via )

Low
Category
Supply Chain
Confidence
72% confidence
Finding
python-dotenv

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.