ClawHub
Back to skill

Security audit

agentcard.ai

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed payment-card workflow for AgentCard, but it should be treated as high-impact financial tooling.

Install only if you are comfortable giving an agent limited payment-card capability. Keep user confirmation enabled, set a low max purchase amount, verify the AgentCard CLI package before installing it globally, protect the local AgentCard session file, and confirm current AgentCard terms and CLI commands before using it for real purchases.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.