Security audit
Security checks for vulnerabilities and agentic risk
This skill is a documentation helper that uses purpose-aligned scripts and snippets, with only minor setup-disclosure issues for users to keep in mind.
Install only if you want a helper for Clawdbot documentation. Expect it to contact docs.clawd.bot and store documentation cache/index files under ~/.cache/clawddocs; review provider snippets carefully before connecting real messaging accounts or using account tokens.
This markdown file includes an operational step to run clawdbot login and scan a QR code, which links the bot to a WhatsApp account. The snippet does not include any warning or disclosure that this action connects to a personal or organizational messaging account and may affect privacy or message access.
The example sets userTimezone to America/New_York, which imposes a specific locale setting in natural-language-oriented configuration without indicating that users should choose their own timezone. Under the policy, forcing a locale-specific default without opt-in can be a language/locale policy violation.
No suspicious patterns detected.
