ClawHub
Back to skill

Security audit

CC3PO Webhook

Security checks for vulnerabilities and agentic risk

Overview

This is a non-executable webhook security guide whose advice matches its stated purpose.

Safe to install as webhook implementation guidance. Before using it in production, verify the publisher if provenance matters, and apply its logging advice carefully by redacting secrets and personal data, restricting log access, and keeping retention short.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.