Security audit
Qdro Drafter
Security checks for vulnerabilities and agentic risk
Overview
The skill artifacts are coherent workflow guidance for ClawHub and Convex work, with powerful actions disclosed and gated by user intent or existing auth.
Install only if you intend to use ClawHub/Convex maintainer or development workflows. Be especially careful with the moderation and autoreview helpers: they can affect real ClawHub users or run nested review with broad local access, so confirm targets and use the lower-privilege options when appropriate.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.