ClawHub
Back to skill

Security audit

Agent Plan Manager

Security checks for vulnerabilities and agentic risk

Overview

This skill is a lightweight Markdown planning helper with no executable code or hidden high-impact behavior.

Install this if you want the agent to maintain visible Markdown planning files in your workspace. Review generated plans before executing any listed steps, and avoid placing secrets or sensitive credentials in plan documents.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.