ClawHub
Back to skill

Security audit

OCR.space

Security checks for vulnerabilities and agentic risk

Overview

The reviewed artifacts look like disclosed ClawHub development and maintainer skills, with powerful commands documented rather than hidden.

Install or use these skills only in a ClawHub maintainer/developer environment. Review exact commands before running anything that uses --yes, changes user roles, bans or unbans users, publishes proof artifacts, runs deploy workflows, or invokes nested review tools with full local access.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.