ClawHub
Back to skill

Security audit

涉税司法案例与争议裁判规则指引

Security checks across malware telemetry and agentic risk

Overview

The skill is tax-focused and not clearly malicious, but it uses remote services, persistent identifiers, local logging, and broad skill installation in ways users should review first.

Install only if you are comfortable with tax questions and risk scenarios being sent to the mcp.aitaxs.top service, local logs being written under the user's home directory, and optional matrix installation downloading additional skills. Avoid entering confidential taxpayer, client, or case-identifying details unless your organization accepts that data flow; review remote package provenance before using the matrix installer.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (50)

Lp3

Medium
Category
MCP Least Privilege
Confidence
92% confidence
Finding
The skill advertises no declared permissions, yet the content and referenced behavior indicate capabilities equivalent to network access, environment inspection, and local file read/write. That mismatch breaks least-privilege expectations and can enable silent configuration changes, local data exposure, or outbound communication without informed user consent.

Tp4

High
Category
MCP Tool Poisoning
Confidence
97% confidence
Finding
The declared purpose is a tax-judicial advisory skill, but the detected behavior expands into client detection, MCP config modification, API-key registration/storage, remote service use, web-search fallback, package installation, and query routing. This is dangerous because it hides a broad execution and persistence surface behind an informational/legal facade, increasing the chance of unauthorized system changes and data exfiltration.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The instruction to trigger on broadly defined 'related intent' can cause the skill to activate in contexts the user did not clearly request. In a skill that also links to external web workflows and promotes deeper analysis flows, overbroad activation increases the risk of unsolicited navigation, unintended data sharing, or routing users into higher-risk functionality.

Vague Triggers

Medium
Confidence
90% confidence
Finding
Generic installation phrases such as installing the full tax skill matrix or related skills can be invoked accidentally during normal conversation. Because the surrounding skill ecosystem appears capable of downloading, routing, or configuring additional components, unintended invocation could expand permissions, alter configuration, or introduce new remote dependencies without a clear security checkpoint.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The client sends user tax questions and risk scenarios to a third-party remote service by default, but the code provides no explicit consent flow, notice, or redaction guard before transmission. Because the data handled here may include sensitive tax, legal, and potentially incriminating business facts, silent exfiltration to an external endpoint creates a real confidentiality and privacy risk.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The code automatically registers with a remote service and persists the returned API key plus a stable device identifier to local disk without an explicit warning or consent step. Even if the identifier is described as anonymous, automatic credential provisioning and persistence can create tracking, privacy, and secret-handling risks, especially on shared systems or managed enterprise endpoints.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The server forwards tool arguments supplied over stdin directly to a remote cloud MCP endpoint, which can include sensitive tax, dispute, or case details, but the request-handling path does not provide runtime disclosure, consent, redaction, or policy gating before transmission. In this skill context, inputs are likely to contain confidential financial, legal, or potentially incriminating information, so silent proxying to an external service creates a real privacy and data-governance risk even if the endpoint itself is legitimate.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The script is explicitly designed to auto-download and install additional skills when triggered in conversation, but the execution path does not present a clear just-in-time consent warning before network retrieval and filesystem modification. In this context, that creates a software supply-chain and user-consent risk: a user may invoke a natural-language trigger without realizing it can fetch remote packages and write them into the skills directory.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The page auto-registers with a remote service and sends a persistent client/device identifier before the user has completed the stated consent flow. This undermines the page's own privacy notice and creates a tracking/privacy risk because a unique identifier is transmitted and stored in localStorage even when the user has not agreed to data sending.

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-advisory-practice",
      "name": "财税中介机构AI合规咨询服务转型专题",
      "package": "tax-advisory-practice.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-advisory-practice",
      "is_core": false,
      "board": "B",
      "version": "3.15.3",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-capital-reduction",
      "name": "减资撤资（未实缴减资）个人所得税财税合规专题",
      "package": "tax-capital-reduction.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-capital-reduction",
      "is_core": false,
      "topics": [
        "减资",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-compliance-dispute",
      "name": "合规争议财税专题",
      "package": "tax-compliance-dispute.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-compliance-dispute",
      "is_core": false,
      "topics": [
        "财税内审",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"name": "建筑施工行业财税合规专题",
      "slug": "tax-construction",
      "package": "tax-construction.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-construction",
      "is_core": true,
      "topics": [
        "建筑施工",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
],
      "version": "3.15.3",
      "download_urls": {
        "skillhub": "https://api.skillhub.cn/api/v1/download?slug=tax-contract-generation-review",
        "clawhub": "https://clawhub.ai/api/v1/download?slug=tax-contract-generation-review"
      },
      "board": "Shared",
Confidence
91% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-crossborder",
      "name": "跨境电商与贸易财税合规专题",
      "package": "tax-crossborder.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-crossborder",
      "is_core": false,
      "topics": [
        "跨境电商",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-ecommerce",
      "name": "国内电商与直播财税合规专题",
      "package": "tax-ecommerce.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-ecommerce",
      "is_core": false,
      "topics": [
        "国内电商",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-education",
      "name": "教育培训行业财税合规专题",
      "package": "tax-education.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-education",
      "is_core": false,
      "topics": [
        "教育培训",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-equity-governance",
      "name": "股权治理财税专题",
      "package": "tax-equity-governance.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-equity-governance",
      "is_core": false,
      "topics": [
        "股权转让",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-hainan-ftp",
      "name": "海南自贸港实质性运营财税合规专题",
      "package": "tax-hainan-ftp.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-hainan-ftp",
      "is_core": false,
      "topics": [
        "海南自由贸易港",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-incentives",
      "name": "优惠资质财税专题",
      "package": "tax-incentives.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-incentives",
      "is_core": false,
      "topics": [
        "高新技术企业认定",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-life-services",
      "name": "生活服务业财税合规专题（医美·黄金珠宝）",
      "package": "tax-life-services.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-life-services",
      "is_core": false,
      "topics": [
        "生活服务业",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-pet-chain",
      "name": "宠物连锁行业财税合规专题",
      "package": "tax-pet-chain.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-pet-chain",
      "is_core": false,
      "topics": [
        "宠物连锁",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-policy-knowledge",
      "name": "财税政策知识库与风险合规助手",
      "package": "tax-policy-knowledge.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-policy-knowledge",
      "is_core": true,
      "topics": [
        "综合税费",
Confidence
91% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-renewable",
      "name": "再生资源行业财税合规专题",
      "package": "tax-renewable.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-renewable",
      "is_core": false,
      "topics": [
        "再生资源",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

External Transmission

Medium
Category
Data Exfiltration
Content
"slug": "tax-restructuring",
      "name": "重组资本运作财税专题",
      "package": "tax-restructuring.zip",
      "download_url": "https://api.skillhub.cn/api/v1/download?slug=tax-restructuring",
      "is_core": false,
      "topics": [
        "破产重整",
Confidence
90% confidence
Finding
https://api.skillhub.cn/

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.