ClawHub
Back to skill

Security audit

Mp Prototype

Security checks for vulnerabilities and agentic risk

Overview

This is a simple prototype-guidance skill with no executable install code, hidden behavior, credential handling, or unrelated data access.

Install this if you want the agent to create temporary prototype code in your workspace. Review generated files before keeping them, and do not treat prototype output as production-ready without a separate implementation and review pass.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.