Security audit
forecast-analysis-claw
Security checks for vulnerabilities and agentic risk
Overview
No concrete evidence of unsafe behavior was available beyond clean advisory scan results, so this should be treated as low-risk but not deeply verified.
The available signals do not show a reason to block installation, but because the target artifacts were not available for direct inspection, users should still review the skill files and permissions before using it with sensitive accounts, credentials, or private data.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.