authensor-gateway Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

authensor-gateway is an AI agent skill, created by authensor and published at openclaw/skills. ClawSecure audited authensor-gateway across 2 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 10 findings concentrate in Prompt Injection, Policy Violation and Malicious Code, including Detects prompt strings used to override or force malicious tool calls:... and Detects prompt strings used to override or force malicious tool calls:.... 7 were rated high or critical severity.

Is authensor-gateway safe?

ClawSecure audited authensor-gateway and assigned a security score of 0/100 (High Risk), identifying 10 findings across Prompt Injection and Policy Violation. Review the findings below before installing.

What did ClawSecure find in authensor-gateway?

ClawSecure identified 10 findings in authensor-gateway, concentrated in Prompt Injection, Policy Violation and Malicious Code. 7 were rated high or critical severity. The most severe include Detects prompt strings used to override or force malicious tool calls:... and Detects prompt strings used to override or force malicious tool calls:....

How was authensor-gateway audited?

ClawSecure ran authensor-gateway through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 2 files from openclaw/skills.

What does a score of 0 mean?

ClawSecure assigned authensor-gateway a security score of 0/100, placing it in the High Risk range. This is driven by 10 findings led by Prompt Injection that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for authensor-gateway

ClawSecure detected 10 security findings in authensor-gateway, spanning Prompt Injection, Policy Violation, Malicious Code and Unauthorized Tool Use.

critical · Detects prompt strings used to override or force malicious tool calls:.... Prompt Injection finding detected in SKILL.md:121.
critical · Detects prompt strings used to override or force malicious tool calls:.... Prompt Injection finding detected in SKILL.md:122.
critical · Detects coercive prompt injections in tool description fields: send.... Prompt Injection finding detected in SKILL.md:134.
critical · Suspicious domain detected: webhook.site (potential data exfiltration). Malicious Code finding detected in SKILL.md.
high · Detects system manipulation, privilege escalation, and destructive file.... Unauthorized Tool Use finding detected in SKILL.md:35.
high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in SKILL.md.
high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in SKILL.md.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
info · Skill name 'Authensor Gateway' is invalid. Agent skills require.... Policy Violation finding detected in SKILL.md.
info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for authensor-gateway

Investigate prompt injection vectors

Prompt injection is one of the most critical threats to AI agents. Attackers can embed malicious instructions in content the agent processes, causing unintended actions. Review every point where authensor-gateway processes external content and add input validation and output filtering.

Resolve policy violations

authensor-gateway trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Audit external network connections

authensor-gateway connects to external endpoints. Verify every outbound connection goes to a trusted destination. Unauthorized callbacks are a primary indicator of ClawHavoc malware and data exfiltration. ClawSecure's proprietary engine monitors for known malicious endpoints including C2 infrastructure.

Related Security Research

The Sleeper Agent Problem: Why a Clean Scan Today Does Not Guarantee Safety Tomorrow→OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→

Related AI Agent Security Audits

awesome-openclaw-skillsScore 0/100 claude-memScore 15/100 understand-anythingScore 0/100 memUScore 0/100 botcoin-minerScore 0/100

Scanned on February 12, 2026. authensor-gateway is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan