ClawHub
Back to skill

Security audit

Dup Finder

Security checks for vulnerabilities and agentic risk

Overview

Dup Finder is a simple local duplicate-file scanner with no evidence of hidden network access, credential use, persistence, or destructive behavior.

Install only if you are comfortable letting the tool read and hash every file under the directory you choose. Avoid scanning sensitive folders unless you intend their file contents to be read locally, and run the packaged `tool.py` script rather than the mismatched filename shown in the README example.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.