ClawHub
Back to skill

Security audit

Reddit Hot Stocks

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to use a disclosed third-party data service for live Reddit and market data, with no evidence of hidden persistence, credential use, destructive behavior, or account-changing actions.

Install only if you are comfortable with a third-party AgentKey MCP being contacted for relevant stock or market requests. Avoid including sensitive portfolio, account, or personal financial details unless they are necessary for the query.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The skill enables implicit invocation, but the activation scope is broad and tied to generic stock-discovery behavior rather than a narrowly constrained trigger. That increases the chance the agent will call the external MCP automatically in unrelated financial conversations, causing unintended data sharing to a third-party service and reducing user awareness/consent.

External Transmission

Medium
Category
Data Exfiltration
Content
value: "agentkey"
      description: "AgentKey MCP for live Reddit social data and finance market data"
      transport: "streamable_http"
      url: "https://api.agentkey.app/v1/mcp"
policy:
  allow_implicit_invocation: true
Confidence
84% confidence
Finding
This skill is configured to send data to an external MCP endpoint over HTTP-based transport, which creates a real data egress path to a third-party service. In the context of a finance-focused skill with implicit invocation enabled, prompts or user-provided portfolio/watchlist context could be transmitted off-platform without sufficiently explicit user intent.

Static analysis

No suspicious patterns detected.