4ed4f5315a9f27aa Security Audit Report
4ed4f5315a9f27aa is an AI agent skill, created by ZhongdaoChen and published at ZhongdaoChen/AI-Agent-Risk-Evaluation. ClawSecure audited 4ed4f5315a9f27aa across 34 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 21 findings concentrate in Code Injection, Malicious Code and Permissions Manifest, including Attempts to access sensitive file: .ssh/ and Attempts to access sensitive file: .ssh/. 19 were rated high or critical severity.
Is 4ed4f5315a9f27aa safe?
ClawSecure audited 4ed4f5315a9f27aa and assigned a security score of 0/100 (High Risk), identifying 21 findings across Code Injection and Malicious Code. Review the findings below before installing.
What did ClawSecure find in 4ed4f5315a9f27aa?
ClawSecure identified 21 findings in 4ed4f5315a9f27aa, concentrated in Code Injection, Malicious Code and Permissions Manifest. 19 were rated high or critical severity. The most severe include Attempts to access sensitive file: .ssh/ and Attempts to access sensitive file: .ssh/.
How was 4ed4f5315a9f27aa audited?
ClawSecure ran 4ed4f5315a9f27aa through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 34 files from ZhongdaoChen/AI-Agent-Risk-Evaluation.
What does a score of 0 mean?
ClawSecure assigned 4ed4f5315a9f27aa a security score of 0/100, placing it in the High Risk range. This is driven by 21 findings led by Code Injection that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for 4ed4f5315a9f27aa
ClawSecure detected 21 security findings in 4ed4f5315a9f27aa, spanning Code Injection, Malicious Code, Permissions Manifest and ReDoS.
- high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in
skill_analyzer.py. - high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in
test_skill_analyzer.py. - high · Potentially dangerous code pattern detected: eval\(. Code Injection finding detected in
MODULES.md. - high · Potentially dangerous code pattern detected: exec\(. Code Injection finding detected in
MODULES.md. - high · Potentially dangerous code pattern detected: eval\(. Code Injection finding detected in
ai_safety_analyzer.py. - high · Potentially dangerous code pattern detected: exec\(. Code Injection finding detected in
ai_safety_analyzer.py. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
ai_safety_analyzer.py. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
code_analyzer.py. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
deps_analyzer.py. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
depsdev_analyzer.py. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
privacy_analyzer.py. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
runtime_analyzer.py.
Showing the 12 highest-severity of 21 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for 4ed4f5315a9f27aa
Eliminate dynamic code execution
Audit external network connections
Add a config.json permissions manifest
Related Security Research
Why Generic Scanners Fail at AI Agent Security→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on July 6, 2026. 4ed4f5315a9f27aa is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.