Security audit
asclaude-grep
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local workspace search helper, and its file-reading behavior matches its stated purpose without signs of hidden upload, persistence, or destructive actions.
Install only if you are comfortable letting the agent search files under your OpenClaw workspace. Avoid using broad searches in folders that contain secrets or sensitive documents, because matching lines and paths can be shown in the agent conversation.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.