korea-metropolitan-bus-alerts Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

korea-metropolitan-bus-alerts is an AI agent skill, created by hsooooo and published at openclaw/skills. ClawSecure audited korea-metropolitan-bus-alerts across 13 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 9 findings concentrate in Unauthorized Tool Use, Prompt Injection and Policy Violation, including Pattern detected: chmod 600 and Pattern detected: chmod 600. 5 were rated high or critical severity.

Is korea-metropolitan-bus-alerts safe?

ClawSecure audited korea-metropolitan-bus-alerts and assigned a security score of 0/100 (High Risk), identifying 9 findings across Unauthorized Tool Use and Prompt Injection. Review the findings below before installing.

What did ClawSecure find in korea-metropolitan-bus-alerts?

ClawSecure identified 9 findings in korea-metropolitan-bus-alerts, concentrated in Unauthorized Tool Use, Prompt Injection and Policy Violation. 5 were rated high or critical severity. The most severe include Pattern detected: chmod 600 and Pattern detected: chmod 600.

How was korea-metropolitan-bus-alerts audited?

ClawSecure ran korea-metropolitan-bus-alerts through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 13 files from openclaw/skills.

What does a score of 0 mean?

ClawSecure assigned korea-metropolitan-bus-alerts a security score of 0/100, placing it in the High Risk range. This is driven by 9 findings led by Unauthorized Tool Use that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for korea-metropolitan-bus-alerts

ClawSecure detected 9 security findings in korea-metropolitan-bus-alerts, spanning Unauthorized Tool Use, Prompt Injection, Policy Violation and Data Exfiltration.

critical · Pattern detected: chmod 600. Unauthorized Tool Use finding detected in scripts/set_tago_key.sh:12.
critical · Pattern detected: chmod 600. Unauthorized Tool Use finding detected in scripts/set_tago_key.sh:37.
critical · Pattern detected: chmod 600. Unauthorized Tool Use finding detected in scripts/set_tago_key.sh:40.
critical · Detects coercive prompt injections in tool description fields: hidden.... Prompt Injection finding detected in SKILL.md:48.
critical · Detects coercive prompt injections in tool description fields: hidden.... Prompt Injection finding detected in scripts/setup.py:10.
medium · Pattern detected: import urllib.request. Data Exfiltration finding detected in scripts/tago_api.py:23.
medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for korea-metropolitan-bus-alerts

Investigate prompt injection vectors

Prompt injection is one of the most critical threats to AI agents. Attackers can embed malicious instructions in content the agent processes, causing unintended actions. Review every point where korea-metropolitan-bus-alerts processes external content and add input validation and output filtering.

Resolve policy violations

korea-metropolitan-bus-alerts trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Audit external network connections

korea-metropolitan-bus-alerts sends data to external endpoints. Confirm each destination is expected and authorized, and remove any callback that exfiltrates data. ClawSecure monitors for known exfiltration and C2 endpoints.

Related Security Research

The Sleeper Agent Problem: Why a Clean Scan Today Does Not Guarantee Safety Tomorrow→OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→

Related AI Agent Security Audits

qiaomu-mondo-poster-designScore 0/100 proactive-agentScore 0/100 zoho-email-integrationScore 0/100 zoho-email-integrationScore 0/100 korea-metropolitan-bus-alertsScore 0/100

Scanned on February 7, 2026. korea-metropolitan-bus-alerts is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan