roku is an AI agent skill, created by gumadeiras and published at openclaw/skills. ClawSecure audited roku across 9 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 14 findings concentrate in Data Exfiltration, Hardcoded Secrets and Resource Abuse, including Pattern detected: requests.post( and Detects potential exposure of sensitive information like API keys,.... 9 were rated high or critical severity.
Is roku safe?
ClawSecure audited roku and assigned a security score of 0/100 (High Risk), identifying 14 findings across Data Exfiltration and Hardcoded Secrets. Review the findings below before installing.
What did ClawSecure find in roku?
ClawSecure identified 14 findings in roku, concentrated in Data Exfiltration, Hardcoded Secrets and Resource Abuse. 9 were rated high or critical severity. The most severe include Pattern detected: requests.post( and Detects potential exposure of sensitive information like API keys,....
How was roku audited?
ClawSecure ran roku through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 9 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned roku a security score of 0/100, placing it in the High Risk range. This is driven by 14 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for roku
ClawSecure detected 14 security findings in roku, spanning Data Exfiltration, Hardcoded Secrets, Resource Abuse and Policy Violation.
- critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
roku-telegram.py:51. - critical · Detects potential exposure of sensitive information like API keys,.... Hardcoded Secrets finding detected in
SKILL.md:63. - critical · Detects potential exposure of sensitive information like API keys,.... Hardcoded Secrets finding detected in
SKILL.md:63. - critical · Detects potential exposure of sensitive information like API keys,.... Hardcoded Secrets finding detected in
SKILL.md:81. - critical · Script accesses environment variables and makes network calls in.... Data Exfiltration finding detected in
/tmp/url-scans/194c53911eadd08a/roku-telegram.py. - critical · Multi-file exfiltration chain detected: roku-telegram.py collect data →.... Data Exfiltration finding.
- critical · Environment variable access with network calls in roku-telegram.py. Data Exfiltration finding.
- high · Pattern detected: while True:. Resource Abuse finding detected in
roku-telegram.py:30. - high · Pattern detected: while True:. Resource Abuse finding detected in
roku-listener.py:58. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
roku-telegram.py:8. - medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding.
- medium · Script iterates through environment variables in.... Data Exfiltration finding detected in
/tmp/url-scans/194c53911eadd08a/roku-telegram.py.
Showing the 12 highest-severity of 14 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for roku
Audit external network connections
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on February 7, 2026. roku is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.