Security audit
Od Tool
Security checks for vulnerabilities and agentic risk
Overview
The skill set is coherent and purpose-aligned, but users should understand that some workflows can run privileged local tools, publish PR proof, or perform staff moderation actions when explicitly invoked.
Install only if you want these ClawHub and Convex operational workflows. Review commands before approving writes, use the autoreview helper's no-yolo option if you do not want full-access nested review, and be aware that fallback review tools may receive generated diffs.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.