ClawHub
Back to skill

Security audit

Remix V2 Meta Sessions

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only Remix reference skill whose security-sensitive examples are disclosed and aligned with its purpose.

Reasonable to install as a Remix reference skill. When applying its auth, session, or CSRF snippets to production, review cookie flags, secret rotation, CSRF validation coverage, current library versions, and adjust example html lang values to your app's actual locale.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Natural-Language Policy Violations

Low
Confidence
88% confidence
Finding
This markdown file contains a code example with `<html lang="en">`, which forces an English locale in the rendered document. Under the policy, locale-specific language should not be imposed unless the skill offers user choice or clearly documents that the skill is intentionally region/language-specific.

Natural-Language Policy Violations

Low
Confidence
91% confidence
Finding
This markdown file includes a code example setting `<html lang="en">`, which forces a specific language/locale in the rendered document. Under the stated policy, locale-specific behavior should offer user choice or be clearly justified as region-specific; neither is present here.

Static analysis

No suspicious patterns detected.