senior-data-engineer Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

senior-data-engineer is an AI agent skill, created by alirezarezvani and published at openclaw/skills. ClawSecure audited senior-data-engineer across 10 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 10/100 (High Risk). The 7 findings concentrate in Command Injection, Policy Violation and Obfuscation, including Pattern detected: compile( and Pattern detected: compile(. 4 were rated high or critical severity.

Is senior-data-engineer safe?

ClawSecure audited senior-data-engineer and assigned a security score of 10/100 (High Risk), identifying 7 findings across Command Injection and Policy Violation. Review the findings below before installing.

What did ClawSecure find in senior-data-engineer?

ClawSecure identified 7 findings in senior-data-engineer, concentrated in Command Injection, Policy Violation and Obfuscation. 4 were rated high or critical severity. The most severe include Pattern detected: compile( and Pattern detected: compile(.

How was senior-data-engineer audited?

ClawSecure ran senior-data-engineer through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 10 files from openclaw/skills.

What does a score of 10 mean?

ClawSecure assigned senior-data-engineer a security score of 10/100, placing it in the High Risk range. This is driven by 7 findings led by Command Injection that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for senior-data-engineer

ClawSecure detected 7 security findings in senior-data-engineer, spanning Command Injection, Policy Violation, Obfuscation and Permissions Manifest.

critical · Pattern detected: compile(. Command Injection finding detected in scripts/pipeline_orchestrator.py:335.
critical · Pattern detected: compile(. Command Injection finding detected in scripts/pipeline_orchestrator.py:448.
critical · Pattern detected: compile(. Command Injection finding detected in scripts/pipeline_orchestrator.py:575.
critical · Pattern detected: f"SELECT MAX(updated_at) FROM {table} WHERE.... Command Injection finding detected in scripts/pipeline_orchestrator.py:672.
medium · File 'troubleshooting.md' extension (.md) suggests one format but.... Obfuscation finding detected in references/troubleshooting.md.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for senior-data-engineer

Harden command execution

senior-data-engineer constructs or runs system commands. Validate that commands are built only from trusted inputs, never pass user-controlled strings directly to a shell, and restrict execution to an allow-list of expected commands.

Resolve policy violations

senior-data-engineer trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Review obfuscated or hidden code

senior-data-engineer contains obfuscated or hidden content that resists review. Inspect encoded, minified or hidden files to confirm they are not concealing unexpected behavior before installing.

Related Security Research

Why Generic Scanners Fail at AI Agent Security→Understanding Our 3-Layer Audit Protocol→

Related AI Agent Security Audits

fzfScore 25/100 understand-anythingScore 0/100 memUScore 0/100 62ac696296b54aadScore 0/100 6bc837afc1a86e89Score 0/100

Scanned on March 16, 2026. senior-data-engineer is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan