Security audit
Security checks for vulnerabilities and agentic risk
This Discord skill is a transparent command guide for an existing Discord bot tool, but users should be careful because it can read, post, delete, and upload content in Discord.
Install only where the Clawdbot Discord permissions match your intended use. Consider disabling unneeded action groups, especially messages, search, uploads, roles, and moderation, and require explicit operator review before deleting messages, moderating users, sending DMs, or uploading local files.
The skill explicitly supports reading/searching Discord content and sending, editing, or deleting messages, but it does not warn users that these actions may access private conversations or modify live community content. That omission can lead operators to invoke sensitive actions without informed consent, increasing the chance of privacy violations or unintended destructive changes.
The skill documents uploading local files via file:// paths and remote media URLs without warning that the referenced content will be transmitted to Discord. This creates a real risk of accidental exfiltration of sensitive local files or unreviewed remote content, particularly because operators may treat file paths as harmless references rather than outbound data transfer.
No suspicious patterns detected.
