zdxx-info-validator Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

zdxx-info-validator is an AI agent skill. ClawSecure audited zdxx-info-validator across 3 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 55/100 (Medium Risk). The 6 findings concentrate in Policy Violation, Data Exfiltration and Code Injection, including Only 60% of skill content could be analyzed. 1 of 3 files… and Suspicious Pattern: fs.readFileSync(. 4 were rated high or critical severity.

Is zdxx-info-validator safe?

ClawSecure audited zdxx-info-validator and assigned a security score of 55/100 (Medium Risk), identifying 6 findings across Policy Violation and Data Exfiltration. Review the findings below before installing.

What did ClawSecure find in zdxx-info-validator?

ClawSecure identified 6 findings in zdxx-info-validator, concentrated in Policy Violation, Data Exfiltration and Code Injection. 4 were rated high or critical severity. The most severe include Only 60% of skill content could be analyzed. 1 of 3 files… and Suspicious Pattern: fs.readFileSync(.

How was zdxx-info-validator audited?

ClawSecure ran zdxx-info-validator through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 3 files.

What does a score of 55 mean?

ClawSecure assigned zdxx-info-validator a security score of 55/100, placing it in the Medium Risk range. This reflects 6 findings led by Policy Violation that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for zdxx-info-validator

ClawSecure detected 6 security findings in zdxx-info-validator, spanning Policy Violation, Data Exfiltration, Code Injection and Permissions Manifest.

high · Only 60% of skill content could be analyzed. 1 of 3 files…. Policy Violation finding.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/zdxx_info_validator.js:953.
high · Suspicious Pattern: fs.readFileSync(. Data Exfiltration finding detected in scripts/zdxx_info_validator.js:961.
high · Potentially dangerous code pattern detected: exec\(. Code Injection finding detected in zdxx_info_validator.js.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
info · Missing License Declaration. Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for zdxx-info-validator

Resolve policy violations

zdxx-info-validator trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Audit external network connections

zdxx-info-validator sends data to external endpoints. Confirm each destination is expected and authorized, and remove any callback that exfiltrates data. ClawSecure monitors for known exfiltration and C2 endpoints.

Eliminate dynamic code execution

zdxx-info-validator evaluates code at runtime (for example eval or dynamic exec). Remove dynamic evaluation of untrusted input, and where code generation is unavoidable, sandbox it and validate every input.

Related Security Research

OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→Understanding Our 3-Layer Audit Protocol→

Related AI Agent Security Audits

7caf5d769dee89c3Score 55/100 ClawSecScore 45/100 7caf5d769dee89c3Score 55/100 7caf5d769dee89c3Score 55/100 4f12f0da6eb7a565Score 55/100

Scanned on June 12, 2026. zdxx-info-validator is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan