Security audit
Financial Operations
Security checks for vulnerabilities and agentic risk
Overview
The reviewed ClawHub skill artifacts are coherent developer, documentation, moderation, and Convex workflow helpers with disclosed commands and user-confirmation gates for sensitive actions.
Install only if you expect these skills to guide ClawHub or Convex development and staff workflows. Review the moderation, content-rights, migration, and autoreview skills carefully because they can guide authenticated admin actions or send code context to external review tools, but the artifacts require explicit user control and do not show hidden or unrelated behavior.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.