ClawHub
Back to skill

Security audit

Pipeworx cataas

Security checks for vulnerabilities and agentic risk

Overview

This skill only connects to a third-party cat-image MCP service and does not request local files, credentials, persistence, or privileged actions.

Before installing, confirm you are comfortable letting your agent contact the Pipeworx CATAAS MCP endpoint to fetch cat image URLs and tags. The skill does not ask for credentials or local data access.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.