ClawHub
Back to skill

Security audit

Decision Engine Lite

Security checks for vulnerabilities and agentic risk

Overview

This is an instruction-only decision-making skill with a disclosed upgrade link and no code, tool access, persistence, or credential handling.

Reasonable to install. Use normal caution when sharing high-stakes personal, financial, or business decision details in chat, and treat the external upgrade site as a separate third-party purchase or account flow.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.