clawdbot-security-suite Security Audit Report
clawdbot-security-suite is an AI agent skill, created by Graydon Trusler and published at gtrusler/clawdbot-security-suite. ClawSecure audited clawdbot-security-suite across 16 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 16 findings concentrate in Code Injection, Malicious Code and Permissions Manifest, including Attempts to access sensitive file: SOUL.md and Attempts to access sensitive file: SOUL.md. 15 were rated high or critical severity.
Is clawdbot-security-suite safe?
ClawSecure audited clawdbot-security-suite and assigned a security score of 0/100 (High Risk), identifying 16 findings across Code Injection and Malicious Code. Review the findings below before installing.
What did ClawSecure find in clawdbot-security-suite?
ClawSecure identified 16 findings in clawdbot-security-suite, concentrated in Code Injection, Malicious Code and Permissions Manifest. 15 were rated high or critical severity. The most severe include Attempts to access sensitive file: SOUL.md and Attempts to access sensitive file: SOUL.md.
How was clawdbot-security-suite audited?
ClawSecure ran clawdbot-security-suite through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 16 files from gtrusler/clawdbot-security-suite.
What does a score of 0 mean?
ClawSecure assigned clawdbot-security-suite a security score of 0/100, placing it in the High Risk range. This is driven by 16 findings led by Code Injection that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for clawdbot-security-suite
ClawSecure detected 16 security findings in clawdbot-security-suite, spanning Code Injection, Malicious Code and Permissions Manifest.
- high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
README.md. - high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
INSTALL.md. - high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
SKILL.md. - high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in
patterns.json. - high · Potentially dangerous code pattern detected: eval\(. Code Injection finding detected in
CONTRIBUTING.md. - high · Potentially dangerous code pattern detected: exec\(. Code Injection finding detected in
CONTRIBUTING.md. - high · Potentially dangerous code pattern detected: system\(. Code Injection finding detected in
CONTRIBUTING.md. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
README.md. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
HOOK.md. - high · Potentially dangerous code pattern detected: wget.*\|.*sh. Code Injection finding detected in
HOOK.md. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
CLAWDBOT-INSTRUCTIONS.md. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
INSTALL.md.
Showing the 12 highest-severity of 16 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for clawdbot-security-suite
Eliminate dynamic code execution
Audit external network connections
Add a config.json permissions manifest
Related Security Research
Why Generic Scanners Fail at AI Agent Security→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on May 2, 2026. clawdbot-security-suite is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.