Security audit
Mortgage Kb Rag
Security checks for vulnerabilities and agentic risk
Overview
No supplied scan or workspace evidence showed harmful behavior, but the target skill artifact was not available for direct inspection in this run.
Install only if the ClawHub listing shows files and metadata that match the skill's stated purpose. In this adjudication, SkillSpector was clean and VirusTotal was pending, but the target artifact itself was not available for direct review, so treat the result as a low-confidence benign classification rather than a full content audit.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.