Security audit
PZERO
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward configuration guide for using PZERO as an OpenClaw custom model provider, with its key and paid API use disclosed.
Review the provider and pricing before installing. Keep PZERO_API_KEY in environment storage rather than hard-coding it, confirm the account has only the balance you intend to spend, and remember that model requests configured through this skill will be sent to PZERO's API.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.