Security audit
Security checks across malware telemetry and agentic risk
This skill is a powerful automation tool that can run local commands, send code to external AI/cloud services, and update GitHub or Notion with limited approval controls.
Install only in an isolated workspace or VM with low-privilege credentials. Assume generated projects and tests can execute code, and assume source/error snippets may be sent to external AI services. Disable scheduled jobs and auto-publish until you have reviewed the configuration, token scopes, Notion database access, and the exact commands it will run.
return {'success': False, 'output': 'Project not found'}
try:
result = subprocess.run(
['python3', '-m', 'unittest', 'discover', '-s', 'tests', '-v'],
cwd=self.project_path,
capture_output=True,return {'success': False, 'output': 'Project path does not exist'}
try:
result = subprocess.run(
['python3', '-m', 'unittest', 'discover', '-s', 'tests', '-v'],
cwd=self.project_path,
capture_output=True,"""
try:
result = subprocess.run([
'claude', '-p', prompt,
'--allowedTools', 'Edit,Write,Bash'
], cwd=str(project_path), capture_output=True, text=True,try:
# agent-browser로 GitHub Trending 접근
subprocess.run([
'agent-browser', 'open',
f'https://github.com/trending/{self.language}?since=daily'
], capture_output=True, timeout=30, check=False)for keyword in self.keywords[:3]: # 상위 3개 키워드만
try:
query = f"{keyword} security tool 2026"
result = subprocess.run([
'node', str(self.brave_search_path),
query, '-n', '3'
], cwd=str(search_path), capture_output=True, text=True,prompt = self._generate_development_prompt(project)
try:
result = subprocess.run([
'claude', '-p', prompt,
'--output-format', 'json',
'--allowedTools', 'Edit,Write,Bash'After fixing, run tests to verify."""
try:
result = subprocess.run([
'claude', '-p', prompt
], cwd=str(project_path), capture_output=True, text=True,
timeout=120, env={**os.environ,import os
try:
result = subprocess.run(
['python3', '-m', 'unittest', 'discover', '-s', 'tests', '-v'],
cwd=str(project_path),
capture_output=True,logger.info("Running tests in %s", project_path)
try:
result = subprocess.run(
['python3', '-m', 'unittest', 'discover', '-s', 'tests', '-v'],
cwd=str(project_path),
capture_output=True,def run_specific(self, project_path: Path, test_file: str) -> Dict:
"""특정 테스트 파일만 실행"""
try:
result = subprocess.run(
['python3', '-m', 'unittest', test_file, '-v'],
cwd=str(project_path),
capture_output=True,# openclaw agent 명령 실행
try:
result = subprocess.run([
'openclaw', 'agent',
'--message', prompt,
'--json'prompt = self._generate_fix_prompt(project_idea, error)
try:
result = subprocess.run([
'openclaw', 'agent',
'--message', prompt
], capture_output=True, text=True, timeout=60)try:
# unittest 실행
result = subprocess.run(
['python3', '-m', 'unittest', 'discover', '-s', 'tests', '-v'],
cwd=self.project_path,
capture_output=True,"""
try:
result = subprocess.run([
'claude', '-p', prompt,
'--allowedTools', 'Edit,Write,Bash'
], cwd=str(project_path), capture_output=True, text=True,}
)
with urllib.request.urlopen(req, timeout=30) as response:
result = json.loads(response.read().decode())
content = result['choices'][0]['message']['content']# 백업 후 수정
backup_path = file_path.with_suffix('.py.backup')
backup_path.write_text(file_content)
file_path.write_text(fixed_code)
logger.info("GLM fix applied, backup at %s", backup_path)
return True64/64 vendors flagged this skill as clean.
No suspicious patterns detected.