Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Clawshi API reference; it uses disclosed curl examples for Clawshi endpoints and does not install code, persist, or hide behavior.
Install only if you intend to use Clawshi. Treat YOUR_KEY as a secret, run authenticated commands only against the listed Clawshi domain, and register only wallet addresses and account details you are comfortable linking to that service.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s https://clawshi.app/api/stats
This markdown file includes curl commands that send an Authorization bearer token to remote endpoints, but the surrounding documentation does not explicitly warn users that these requests transmit credentials over the network or advise handling the key carefully. While the examples are functional, the category requires warnings for behaviors that could affect privacy or sensitive data exposure.
The markdown instructs users to POST a wallet address to the service, which is a user-data disclosure to an external system. The file does not include any warning that this links the wallet identifier with the user's Clawshi account or that the information will be transmitted remotely.
No suspicious patterns detected.