← Back to Scanner

code-security-auditor-pro​ Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower
Source:
SHA-256:

code-security-auditor-pro​ is an AI agent skill. ClawSecure audited code-security-auditor-pro​ across 5 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 55/100 (Medium Risk). The 10 findings concentrate in Policy Violation, Command Injection and Unicode Steganography, including Only 17% of skill content could be analyzed. 4 of 5 files… and Binary file 'OWASP 安全编码规范 快速参考指南.pdf' cannot be inspected…. 1 was rated high or critical severity.

Is code-security-auditor-pro​ safe?

ClawSecure audited code-security-auditor-pro​ and assigned a security score of 55/100 (Medium Risk), identifying 10 findings across Policy Violation and Command Injection. Review the findings below before installing.

What did ClawSecure find in code-security-auditor-pro​?

ClawSecure identified 10 findings in code-security-auditor-pro​, concentrated in Policy Violation, Command Injection and Unicode Steganography. 1 was rated high or critical severity. The most severe include Only 17% of skill content could be analyzed. 4 of 5 files… and Binary file 'OWASP 安全编码规范 快速参考指南.pdf' cannot be inspected….

How was code-security-auditor-pro​ audited?

ClawSecure ran code-security-auditor-pro​ through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 5 files.

What does a score of 55 mean?

ClawSecure assigned code-security-auditor-pro​ a security score of 55/100, placing it in the Medium Risk range. This reflects 10 findings led by Policy Violation that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for code-security-auditor-pro​

ClawSecure detected 10 security findings in code-security-auditor-pro​, spanning Policy Violation, Command Injection, Unicode Steganography and Permissions Manifest.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for code-security-auditor-pro​

Resolve policy violations
code-security-auditor-pro​ trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.
Harden command execution
code-security-auditor-pro​ constructs or runs system commands. Validate that commands are built only from trusted inputs, never pass user-controlled strings directly to a shell, and restrict execution to an allow-list of expected commands.
Add a config.json permissions manifest
A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Related Security Research

OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security StandardsUnderstanding Our 3-Layer Audit Protocol

Related AI Agent Security Audits

gitlab-cli-skillsScore 55/100skill-vetter-v2Score 70/100skill-creatorScore 65/100skill-creatorScore 65/100nginx-analyzeScore 60/100

Scanned on June 12, 2026. code-security-auditor-pro​ is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan