ClawHub
Back to skill

Security audit

Compliancescan

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed website compliance scanner that sends user-provided URLs to compliancescan.eu and has reasonable guardrails around API keys, retries, and output.

Install if you are comfortable sending website URLs to compliancescan.eu for analysis. Only configure COMPLIANCESCAN_API_KEY if you intend to use authenticated full scans or account features, and verify before running scans that may consume credits.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.