zonein is an AI agent skill, created by phutt-bwai and published at openclaw/skills. ClawSecure audited zonein across 14 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 10/100 (High Risk). The 18 findings concentrate in Data Exfiltration, Unauthorized Tool Use and Policy Violation, including Pattern detected: Do NOT tell user and Skill code uses network libraries but doesn't declare network.... 1 was rated high or critical severity.
Is zonein safe?
ClawSecure audited zonein and assigned a security score of 10/100 (High Risk), identifying 18 findings across Data Exfiltration and Unauthorized Tool Use. Review the findings below before installing.
What did ClawSecure find in zonein?
ClawSecure identified 18 findings in zonein, concentrated in Data Exfiltration, Unauthorized Tool Use and Policy Violation. 1 was rated high or critical severity. The most severe include Pattern detected: Do NOT tell user and Skill code uses network libraries but doesn't declare network....
How was zonein audited?
ClawSecure ran zonein through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 14 files from openclaw/skills.
What does a score of 10 mean?
ClawSecure assigned zonein a security score of 10/100, placing it in the High Risk range. This is driven by 18 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for zonein
ClawSecure detected 18 security findings in zonein, spanning Data Exfiltration, Unauthorized Tool Use, Policy Violation and Prompt Injection.
- high · Pattern detected: Do NOT tell user. Prompt Injection finding detected in
SKILL.md:296. - medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding detected in
/tmp/url-scans/ab4c1ced9a6ab646/SKILL.md. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/ab4c1ced9a6ab646/scripts/check_signals.py. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/ab4c1ced9a6ab646/scripts/market_overview.py. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/ab4c1ced9a6ab646/scripts/track_trader.py. - medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/ab4c1ced9a6ab646/scripts/zonein.py. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/check_signals.py:32. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/check_signals.py:37. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/market_overview.py:26. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/market_overview.py:30. - medium · Pattern detected: urllib.request.Request(. Data Exfiltration finding detected in
scripts/track_trader.py:28. - medium · Pattern detected: urllib.request.urlopen(. Data Exfiltration finding detected in
scripts/track_trader.py:32.
Showing the 12 highest-severity of 18 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for zonein
Audit external network connections
Resolve policy violations
Investigate prompt injection vectors
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on April 9, 2026. zonein is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.