ClawHub
Back to skill

Security audit

Kibana

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Kibana integration that uses ClawLink for authenticated access and requires confirmation before write or destructive actions.

Install only if you are comfortable connecting ClawLink to your Kibana instance. Review previews carefully before approving changes, especially deletes, Fleet configuration changes, connector changes, and detection-rule updates because those can affect monitoring, security operations, and deployed agents.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.