Security audit
Claw Skill Vetter Pro
Security checks for vulnerabilities and agentic risk
Overview
This is a checklist-style skill for reviewing other skills before installation, with no executable code or hidden access found.
Reasonable to install as a security-review checklist. When using it, grant the agent access only to the skill or repository being reviewed, allow network access only for the intended GitHub lookups, and treat its output as guidance rather than a guarantee.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.