Go Vuln Info Disclosure

• Verdict: Advisory
• Analyzed: Apr 30, 2026, 5:13 AM
• Findings: 0
• Version: 0.1.0
• Reason codes: None
• Engine: v2.4.5

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

The skill may guide the agent to search source code for credentials or secret-related fields during an audit.

Why it was flagged

The skill provides shell grep commands for finding sensitive-data handling in Go code. These commands are purpose-aligned and limited to local code inspection, but they may surface secrets if run on real repositories.

Skill content

grep -rn 'log\.Print\|logrus\.\|zap\.\|logger\.' --include="*.go" | grep -i 'secret\|password\|token\|credential\|key'

Recommendation

Use it only for authorized code reviews and avoid copying discovered secrets into logs, chats, tickets, or public reports.