HomeScanBlogRegistryMarketplace🔍 Scan a Skill
← Back to Scanner

c60f992f295e022d Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower
Source:
SHA-256:

c60f992f295e022d is a Other skill for the OpenClaw ecosystem, created by openclaw. ClawSecure audited this skill through our 3-Layer Audit Protocol covering all 10 OWASP ASI Top 10 categories. This skill received a security score of 65/100, indicating moderate risk areas that should be addressed. The audit identified 4 findings across the scan's three security layers.

What does a score of 65 mean?

A security score of 65/100 places this skill in the Medium Risk range. Skills in this range have identifiable security concerns that may need remediation before production use. Review the findings below and consider the specific recommendations provided. ClawSecure calculates scores using a weighted deduction model: critical findings deduct 20 points, high-severity findings deduct 10, medium-severity 5, and low-severity 2. A perfect score of 100 means no findings were detected across all three audit layers.

3-Layer Audit Protocol

Security Recommendations for c60f992f295e022d

Pin npm dependencies to exact versions
Unpinned dependencies allow supply chain attacks where a compromised package version is automatically pulled into your skill. Use exact version numbers in package.json (e.g., 1.2.3 instead of ^1.2.3) to prevent unauthorized code from entering your dependency tree. ClawSecure's supply chain scanning checks every dependency against known CVE databases.
Add a config.json permissions manifest
A config.json file declares what permissions your OpenClaw skill needs — file system access, network requests, shell execution, and more. Without it, users have no visibility into what your skill can do before installing. Adding a permissions manifest is the single most impactful security improvement for any OpenClaw skill.

Related OpenClaw Security Research

Securing the OpenClaw Ecosystem: Your Complete GuideUnderstanding Our 3-Layer Audit Protocol

Related Other Security Audits

官方项目验证器Score 98/100chaterimo-openclaw-skillScore 95/100c376fd05e09d59c2Score 95/100624aee5f17bf59b1Score 95/100624aee5f17bf59b1Score 95/100

Scanned on March 4, 2026. c60f992f295e022d is one of 2,890+ agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

🔍 Scan Another Agent