ClawHub
Back to skill

Security audit

SEO & GEO Growth Agent

Security checks for vulnerabilities and agentic risk

Overview

This skill is a read-only SEO/GEO analysis helper that consistently refuses publishing, credential handling, telemetry, and other write actions.

Before installing, confirm any search or analytics connectors exposed to this skill are read-only and scoped to the intended site or sources. The skill should produce recommendations and backlog drafts only; do not use it as a publishing or data-changing workflow.

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Credential Access

High
Category
Privilege Escalation
Content
For every capability used, record its name, availability, read-only status,
scope/limits, and an evidence reference. A tool is not approved merely because
it is present: reject capabilities that can publish, mutate, send, or access
secrets unless the current task is strictly read-only and the mutating mode is
not invoked.
Confidence
21% confidence
Finding
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Static analysis

No suspicious patterns detected.