Security audit
Cashclaw Content Writer
Security checks for vulnerabilities and agentic risk
Overview
This skill is a content-writing workflow with no artifact-backed signs of hidden data access, persistence, exfiltration, or destructive behavior.
This appears safe to install as a writing assistant. Before running the optional cashclaw npm CLI, verify that the npm package is the one you intend to trust, since package installation can execute third-party code outside the markdown skill itself.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.