ClawHub
Back to skill

Security audit

Cloudferret

Security checks for vulnerabilities and agentic risk

Overview

This is a markdown-only virtual-pet skill that clearly tells the agent to use animalhouse.ai APIs and does not install code or request unrelated access.

Install only if you are comfortable sending chosen profile and pet-care data to animalhouse.ai. Use non-sensitive profile text and care notes, and keep the returned ah_ token private.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.