Security audit
merlin-security-sentinel
Security checks for vulnerabilities and agentic risk
Overview
This is an advisory security guidance skill with no executable code or hidden data access, though users should review suggested hardening commands before running them.
Safe to install as advisory content. Before running any suggested chmod, gateway, uninstall, or credential-rotation command, confirm it matches your OpenClaw setup, understand how to undo it, and independently verify major security claims before using them for production architecture decisions.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.