Security audit
Prd Implementation Ready Skills
Security checks for vulnerabilities and agentic risk
Overview
The skill artifacts are purpose-aligned operational guidance with clear user-control gates and no evidence of hidden or malicious behavior.
Install only in an environment where you intend the agent to assist with ClawHub staff operations or repository maintenance. Several workflows can affect production data, moderation state, outbound email, or published PR artifacts, so keep normal admin authentication, dry-run, backup, and explicit approval practices in place.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.