ClawHub
Back to skill

Security audit

Llamaindex

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only LlamaIndex helper whose local indexing and vector-store examples match its RAG purpose.

Install packages deliberately, consider pinning versions in real projects, and only index folders you intend to make searchable. If documents are private, protect or delete the persistent vector database when it is no longer needed.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.