lifepath is an AI agent skill, created by Sehil Systems Studio - The Trench and published at openclaw/skills. ClawSecure audited lifepath across 21 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 3/100 (High Risk). The 15 findings concentrate in Supply Chain, Data Exfiltration and Policy Violation, including Only 40% of skill content could be analyzed. 12 of 21 files are opaque... and Pattern detected: fs.readFileSync(. 8 were rated high or critical severity.
Is lifepath safe?
ClawSecure audited lifepath and assigned a security score of 3/100 (High Risk), identifying 15 findings across Supply Chain and Data Exfiltration. Review the findings below before installing.
What did ClawSecure find in lifepath?
ClawSecure identified 15 findings in lifepath, concentrated in Supply Chain, Data Exfiltration and Policy Violation. 8 were rated high or critical severity. The most severe include Only 40% of skill content could be analyzed. 12 of 21 files are opaque... and Pattern detected: fs.readFileSync(.
How was lifepath audited?
ClawSecure ran lifepath through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 21 files from openclaw/skills.
What does a score of 3 mean?
ClawSecure assigned lifepath a security score of 3/100, placing it in the High Risk range. This is driven by 15 findings led by Supply Chain that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for lifepath
ClawSecure detected 15 security findings in lifepath, spanning Supply Chain, Data Exfiltration, Policy Violation and Permissions Manifest.
- high · Only 40% of skill content could be analyzed. 12 of 21 files are opaque.... Policy Violation finding.
- high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
scripts/init-db.js:20. - high · Pattern detected: fs.writeFileSync(. Data Exfiltration finding detected in
src/services/imageService.js:175. - high · Vulnerability in axios@1.7.9: Axios is Vulnerable to Denial of Service.... Supply Chain finding detected in
package.json. - high · Vulnerability in axios@1.7.9: Axios is vulnerable to DoS attack through.... Supply Chain finding detected in
package.json. - high · Vulnerability in axios@1.7.9: axios Requests Vulnerable To Possible.... Supply Chain finding detected in
package.json. - high · Vulnerability in fastify@4.29.0: Fastify's Content-Type header tab.... Supply Chain finding detected in
package.json. - high · Vulnerability in fastify@4.29.0: Fastify vulnerable to invalid.... Supply Chain finding detected in
package.json. - medium · Pattern detected: fetch(. Data Exfiltration finding detected in
src/routes/moltbook.js:32. - medium · Pattern detected: axios.post(. Data Exfiltration finding detected in
src/services/imageService.js:143. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- low · Vulnerability in fastify@4.29.0: Fastify Vulnerable to DoS via.... Supply Chain finding detected in
package.json.
Showing the 12 highest-severity of 15 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for lifepath
Update and pin dependencies
Audit external network connections
Resolve policy violations
Related Security Research
AI Agent Supply Chain Attacks: How Dependencies Become Weapons→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on April 30, 2026. lifepath is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.