seoul-metro Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

seoul-metro is an AI agent skill, created by dukbong and published at dukbong/seoul-metro. ClawSecure audited seoul-metro across 70 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 85/100 (Safe). The 4 findings concentrate in ReDoS, Policy Violation and Permissions Manifest, including Missing config.json - agent may not be properly configured and ReDoS vulnerability: Nested quantifiers (potential catastrophic.... None were rated high or critical severity.

Is seoul-metro safe?

ClawSecure audited seoul-metro and assigned a security score of 85/100 (Safe), identifying 4 findings across ReDoS and Policy Violation. Review the findings below before installing.

What did ClawSecure find in seoul-metro?

ClawSecure identified 4 findings in seoul-metro, concentrated in ReDoS, Policy Violation and Permissions Manifest. The most severe include Missing config.json - agent may not be properly configured and ReDoS vulnerability: Nested quantifiers (potential catastrophic....

How was seoul-metro audited?

ClawSecure ran seoul-metro through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 70 files from dukbong/seoul-metro.

What does a score of 85 mean?

ClawSecure assigned seoul-metro a security score of 85/100, placing it in the Safe range. Scores of 80 or above qualify for ClawSecure Verified status; the 4 findings detected are lower-severity. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for seoul-metro

ClawSecure detected 4 security findings in seoul-metro, spanning ReDoS, Policy Violation and Permissions Manifest.

medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
medium · ReDoS vulnerability: Nested quantifiers (potential catastrophic.... ReDoS finding detected in prettify.js:2.
medium · ReDoS vulnerability: RegExp constructor with nested quantifiers — "new.... ReDoS finding detected in prettify.js:2.
info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for seoul-metro

Fix ReDoS-prone patterns

seoul-metro contains regular expressions vulnerable to catastrophic backtracking (ReDoS). Replace vulnerable patterns, bound input length, and prefer linear-time matching so a crafted input cannot hang the agent.

Resolve policy violations

seoul-metro trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Add a config.json permissions manifest

A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Pin dependencies to exact versions

Unpinned dependencies allow supply-chain attacks where a compromised version is pulled in automatically. Use exact version numbers in package.json (for example 1.2.3 instead of ^1.2.3) to keep unauthorized code out of your dependency tree. ClawSecure checks every dependency against known CVE databases.

Related Security Research

Why Generic Scanners Fail at AI Agent Security→Understanding Our 3-Layer Audit Protocol→OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→

Related AI Agent Security Audits

c1cb277f8f4aa143Score 95/100 19af8eafb16b72f6Score 75/100 b4abd97bcb77151aScore 75/100 30bdbb41c9aa6d07Score 95/100 624aee5f17bf59b1Score 95/100

Scanned on February 18, 2026. seoul-metro is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan