ClawHub
Back to skill

Security audit

Polsia Stripe Payments

Security checks for vulnerabilities and agentic risk

Overview

This skill collection contains disclosed ClawHub and Convex maintenance workflows with strong confirmation, dry-run, and audit safeguards around the high-impact actions.

Install only if you intend to use ClawHub staff workflows, Convex maintenance, or AI code review. Keep admin and provider credentials scoped, review dry-run output before approving production changes or emails, and avoid including secrets in review bundles.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.