Security audit
Topic Planner Agent
Security checks for vulnerabilities and agentic risk
Overview
The artifact appears to be a coherent ClawHub maintainer/developer skill set with disclosed repo, review, UI proof, Convex, and moderation workflows rather than hidden or unrelated behavior.
Install this only if you are doing ClawHub maintainer or development work and are comfortable letting the skill use your existing GitHub, Convex, and ClawHub CLI credentials. Review commands before running moderation or publishing workflows, and use the autoreview helper’s no-yolo option if you do not want nested review to run with full local access.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.