← Back to Scanner

20509b379f08b1a7 Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower
Source:
SHA-256:

20509b379f08b1a7 is an AI agent skill, created by adversa-ai and published at adversa-ai/secureclaw. ClawSecure audited 20509b379f08b1a7 across 71 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 99 findings concentrate in Malicious Code, Code Injection and Cve, including CVE-2026-25253: Dangerous configuration modification… and Suspicious domain detected: webhook.site (potential data…. 98 were rated high or critical severity.

Is 20509b379f08b1a7 safe?

ClawSecure audited 20509b379f08b1a7 and assigned a security score of 0/100 (High Risk), identifying 99 findings across Malicious Code and Code Injection. Review the findings below before installing.

What did ClawSecure find in 20509b379f08b1a7?

ClawSecure identified 99 findings in 20509b379f08b1a7, concentrated in Malicious Code, Code Injection and Cve. 98 were rated high or critical severity. The most severe include CVE-2026-25253: Dangerous configuration modification… and Suspicious domain detected: webhook.site (potential data….

How was 20509b379f08b1a7 audited?

ClawSecure ran 20509b379f08b1a7 through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 71 files from adversa-ai/secureclaw.

What does a score of 0 mean?

ClawSecure assigned 20509b379f08b1a7 a security score of 0/100, placing it in the High Risk range. This is driven by 99 findings led by Malicious Code that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for 20509b379f08b1a7

ClawSecure detected 99 security findings in 20509b379f08b1a7, spanning Malicious Code, Code Injection, Cve and Permissions Manifest.

Showing the 12 highest-severity of 99 findings. The full interactive list appears below.

3-Layer Audit Protocol

Security Recommendations for 20509b379f08b1a7

Audit external network connections
20509b379f08b1a7 connects to external endpoints. Verify every outbound connection goes to a trusted destination. Unauthorized callbacks are a primary indicator of ClawHavoc malware and data exfiltration. ClawSecure's proprietary engine monitors for known malicious endpoints including C2 infrastructure.
Eliminate dynamic code execution
20509b379f08b1a7 evaluates code at runtime (for example eval or dynamic exec). Remove dynamic evaluation of untrusted input, and where code generation is unavoidable, sandbox it and validate every input.
Add a config.json permissions manifest
A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Related Security Research

ClawHavoc Explained: The Malware Family Targeting AI AgentsBeyond Static Scans: Why ClawSecure Verifies Agentic Intent

Related AI Agent Security Audits

79129ab11fed32e9Score 0/100a4b01e81f20e9814Score 0/1006bc837afc1a86e89Score 0/10062ac696296b54aadScore 0/10080e3abb00251d455Score 0/100

Scanned on May 11, 2026. 20509b379f08b1a7 is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan