Security audit
Hotel Revenue Pacing Report
Security checks for vulnerabilities and agentic risk
Overview
The skill set is mostly coherent for ClawHub maintainer work, but one review helper defaults to running a nested agent with unrestricted local access.
Install only if you trust the publisher and intend to use these for ClawHub maintainer work. Use `--no-yolo` or `AUTOREVIEW_YOLO=0` before running autoreview unless you deliberately want a nested reviewer with full local access, and be aware fallback review CLIs may receive code diffs.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.