Back to skill

Security audit

Oraclaw Evolve

Security checks for vulnerabilities and agentic risk

Overview

This skill is a clear, instruction-only optimizer integration with disclosed API-key and per-use pricing requirements.

Install only if you trust the OraClaw service with the optimization inputs you provide and are comfortable using ORACLAW_API_KEY for paid calls. Consider confirming before large or repeated optimizations because the skill discloses per-use pricing.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.