ClawHub
Back to skill

Security audit

PRDigest

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrow adapter that turns PRDigest CLI JSON facts into prose while explicitly avoiding installs, direct GitHub calls, Telegram sending, AI providers, and credential disclosure.

Install this if you want Codex/OpenClaw to format PRDigest facts as prose. Confirm your PRDigest CLI and config are already set up, and review any requested install or configuration changes before approving them.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.