ClawHub
Back to skill

Security audit

Claude API Builder

Security checks for vulnerabilities and agentic risk

Overview

This is a small instruction-only helper for Claude/Anthropic API development and does not install code, request credentials, or perform hidden actions.

Installers should understand this skill helps an agent give Claude API implementation guidance. Review any code the agent later writes, and only provide Anthropic API keys in trusted projects and environments.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.