ClawHub
Back to skill

Security audit

geo-audit

Security checks for vulnerabilities and agentic risk

Overview

This skill performs a bounded website GEO/SEO audit and writes a local markdown report, with no evidence of hidden, destructive, or unrelated behavior.

Before installing, expect the skill to fetch and analyze pages from a website you provide, inspect public brand signals, and write a GEO-AUDIT-REPORT.md file in the workspace. Review the generated report before acting on its recommendations, especially where it suggests website or schema changes.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Confidence
90% confidence
Finding
The skill explicitly instructs the agent to generate and write `GEO-AUDIT-REPORT.md` into the workspace, but the skill metadata/description does not warn the user that local files will be created or modified. This can lead to unexpected workspace side effects, especially in environments where users assume analysis is read-only.

Static analysis

No suspicious patterns detected.