unione is an AI agent skill, created by andythemartketing and published at openclaw/skills. ClawSecure audited unione across 3 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 18 findings concentrate in Command Injection, Policy Violation and Permissions Manifest, including Detects command injection patterns in agent skills: shell operators,... and Detects command injection patterns in agent skills: shell operators,.... 16 were rated high or critical severity.
Is unione safe?
ClawSecure audited unione and assigned a security score of 0/100 (High Risk), identifying 18 findings across Command Injection and Policy Violation. Review the findings below before installing.
What did ClawSecure find in unione?
ClawSecure identified 18 findings in unione, concentrated in Command Injection, Policy Violation and Permissions Manifest. 16 were rated high or critical severity. The most severe include Detects command injection patterns in agent skills: shell operators,... and Detects command injection patterns in agent skills: shell operators,....
How was unione audited?
ClawSecure ran unione through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 3 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned unione a security score of 0/100, placing it in the High Risk range. This is driven by 18 findings led by Command Injection that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for unione
ClawSecure detected 18 security findings in unione, spanning Command Injection, Policy Violation, Permissions Manifest and Code Injection.
- critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:501. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:505. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:527. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:534. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:541. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:552. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:561. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:565. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:569. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:579. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:583. - critical · Detects command injection patterns in agent skills: shell operators,.... Command Injection finding detected in
SKILL.md:593.
Showing the 12 highest-severity of 18 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for unione
Harden command execution
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
Why Generic Scanners Fail at AI Agent Security→Understanding Our 3-Layer Audit Protocol→Related AI Agent Security Audits
Scanned on February 7, 2026. unione is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.