ClawHub
Back to skill

Security audit

Oraclaw Solver

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward optimization helper that discloses its API key requirement and paid external solver use.

Before installing, make sure you trust the OraClaw service with any schedules, budgets, staffing plans, or routing data you send, and consider setting confirmations or usage limits because calls may consume quota or incur charges.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.