Security audit
Cn Percentage Tool
Security checks for vulnerabilities and agentic risk
Overview
The skill artifacts are coherent workflow guidance for ClawHub and Convex work, with sensitive actions disclosed and tied to user-directed tasks.
Install only if you want agents to help with ClawHub maintainer/moderation and Convex project tasks. Keep confirmation prompts enabled, verify exact targets before moderation or GitHub writes, and use least-privilege tokens because some workflows can run external CLIs, package installs, CI/proof jobs, or account-impacting moderation commands.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.