Back to skill

Security audit

Biomed Dataset Finder

Security checks for vulnerabilities and agentic risk

Overview

The artifacts are coherent ClawHub and Convex workflow skills, with sensitive actions disclosed and generally bounded by user confirmation or normal platform authentication.

Install only if you want an agent to help with ClawHub/Convex development or staff workflows. Use extra care with moderation, migration, deploy, PR publishing, and autoreview helper commands because they can affect accounts, production data, GitHub comments, or local execution permissions; review the command shown before allowing writes.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.