ClawHub
Back to skill

Security audit

Remix V2 Meta Sessions Review

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only Remix security-review helper that guides code inspection and does not install or run code.

Reasonable to install for Remix v2 security and SEO code review. Use it in repositories where the agent is allowed to inspect auth, session, CSRF, cookie configuration, env examples, and relevant git history; review any generated findings before acting on them.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Low
Confidence
80% confidence
Finding
The example in this markdown file sets `<html lang="en">`, which is natural-language content embedded in code and forces a specific language/locale. The policy allows locale constraints when clearly documented and justified, but this file does not explain why English is required or present it as an opt-in choice.

Static analysis

No suspicious patterns detected.