Back to skill

Security audit

TOSR Test Skill For Delete

Security checks for vulnerabilities and agentic risk

Overview

This is a small markdown-only test skill that openly describes Clawhub API lifecycle testing, including deleting its own test skill, with no executable code or hidden behavior found.

Install only if you need this Clawhub lifecycle test reference. Because it concerns create/update/delete API operations, avoid using production credentials or production skill slugs unless you intentionally want to test those actions.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.