probe-14-webhook Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

probe-14-webhook is an AI agent skill. ClawSecure audited probe-14-webhook across 2 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 50/100 (Medium Risk). The 7 findings concentrate in Data Exfiltration, Malicious Code and Unauthorized Tool Use, including Suspicious domain detected: webhook.site (potential data… and Script contains suspicious URL that may be used for data…. 2 were rated high or critical severity.

Is probe-14-webhook safe?

ClawSecure audited probe-14-webhook and assigned a security score of 50/100 (Medium Risk), identifying 7 findings across Data Exfiltration and Malicious Code. Review the findings below before installing.

What did ClawSecure find in probe-14-webhook?

ClawSecure identified 7 findings in probe-14-webhook, concentrated in Data Exfiltration, Malicious Code and Unauthorized Tool Use. 2 were rated high or critical severity. The most severe include Suspicious domain detected: webhook.site (potential data… and Script contains suspicious URL that may be used for data….

How was probe-14-webhook audited?

ClawSecure ran probe-14-webhook through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 2 files.

What does a score of 50 mean?

ClawSecure assigned probe-14-webhook a security score of 50/100, placing it in the Medium Risk range. This reflects 7 findings led by Data Exfiltration that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for probe-14-webhook

ClawSecure detected 7 security findings in probe-14-webhook, spanning Data Exfiltration, Malicious Code, Unauthorized Tool Use and Permissions Manifest.

critical · Suspicious domain detected: webhook.site (potential data…. Malicious Code finding detected in notify.py.
high · Script contains suspicious URL that may be used for data…. Data Exfiltration finding detected in scripts/notify.py.
medium · Undeclared Network Access. Unauthorized Tool Use finding detected in SKILL.md.
medium · Suspicious Pattern: urllib.request.Request(. Data Exfiltration finding detected in scripts/notify.py:16.
medium · Suspicious Pattern: urllib.request.urlopen(. Data Exfiltration finding detected in scripts/notify.py:21.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
info · Missing License Declaration. Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for probe-14-webhook

Audit external network connections

probe-14-webhook sends data to external endpoints. Confirm each destination is expected and authorized, and remove any callback that exfiltrates data. ClawSecure monitors for known exfiltration and C2 endpoints.

Add a config.json permissions manifest

A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Resolve policy violations

probe-14-webhook trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Related Security Research

ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→

Related AI Agent Security Audits

claude-channel-whatsappScore 50/100 feishu-imageScore 35/100 zoho-email-integrationScore 65/100 clawdbot-zoho-emailScore 65/100 clawdbot-zoho-emailScore 65/100

Scanned on March 30, 2026. probe-14-webhook is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan