Security audit
Cas China Mastery
Security checks for vulnerabilities and agentic risk
Overview
The inspected skill artifacts are coherent maintainer and Convex workflow helpers with disclosed high-impact actions and no evidence of hidden or malicious behavior.
Install only if you want repo-specific ClawHub maintainer automation. Be aware that moderation commands can affect real users and skills, and the autoreview helper may run nested review tooling with broad local access or send diffs to configured reviewer CLIs.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.