ClawHub
Back to skill

Security audit

SignWell

Security checks for vulnerabilities and agentic risk

Overview

This is a focused ByteForms connector that lets an agent read forms and responses through the OOMOL oo CLI, with no evidence of hidden or destructive behavior.

Install only if you intend to let the agent read ByteForms forms and responses from your connected account. Confirm you trust the OOMOL oo CLI connection flow, and avoid using it on forms containing data you do not want visible in the agent session.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.