ClawHub
Back to skill

Security audit

Claude Code Mastery

Security checks for vulnerabilities and agentic risk

Overview

This skill is a non-executable Claude Code guide with simple prompt templates and no evidence of hidden collection, persistence, or unsafe actions.

Review this as a documentation/prompt-template skill. Be aware that it claims to include MCP scripts and sample configurations that are not actually present, and do not run any external MCP setup commands unless you separately inspect and trust them.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.