Security audit
Security checks for vulnerabilities and agentic risk
This is a simple local risk-assessment helper with no hidden data access, persistence, network use, or destructive behavior, though its advice should not be treated as authoritative for business decisions.
Installers should treat the outputs as lightweight advisory examples, not professional financial, compliance, or operational risk determinations. If using the publishing commands, prefer a trusted or pinned ClawHub CLI version rather than running an unpinned `npx` command.
The documentation instructs users to run npx clawhub login, which fetches and executes the latest published package version at runtime without pinning. If the upstream package, dependency chain, or registry resolution is compromised, users could execute unintended code on their systems during login.
The publish command uses npx clawhub publish without an explicit version, causing execution of whatever version resolves at the time the command is run. In a supply-chain compromise scenario, this could lead to arbitrary code execution in the publisher's environment and exposure of local source, credentials, or release artifacts.
The skill description is very broad ('identify, assess, and manage various types of risks') and the manifest provides no trigger scope, domain boundaries, or activation constraints. In agent ecosystems, this can cause over-invocation, misuse outside intended contexts, or excessive trust in outputs for high-stakes risk decisions, even if the file does not contain obviously malicious behavior.
This Python skill is in scope for natural-language policy review. The user-facing metadata, docstrings, status values, and recommendations are all hard-coded in English, and the file provides no opt-in or mechanism for alternate language/locale selection.
No suspicious patterns detected.
