ClawHub
Back to skill

Security audit

AI Tools

Security checks for vulnerabilities and agentic risk

Overview

This is a text-only business guidance skill about monetizing AI tools and it does not run code, access files, or handle accounts.

Reasonable to install as general business guidance. Treat legal, tax, platform, identity, and payment setup advice as informational, and verify requirements directly with the relevant platform or professional before submitting sensitive documents or payment details.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.