gram is an AI agent skill, created by arein and published at arein/gram. ClawSecure audited gram across 52 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 15 findings concentrate in Data Exfiltration, Code Injection and Policy Violation, including Only 41% of skill content could be analyzed. 28 of 52 files are opaque... and Pattern detected: fs.readFileSync(. 10 were rated high or critical severity.
Is gram safe?
ClawSecure audited gram and assigned a security score of 0/100 (High Risk), identifying 15 findings across Data Exfiltration and Code Injection. Review the findings below before installing.
What did ClawSecure find in gram?
ClawSecure identified 15 findings in gram, concentrated in Data Exfiltration, Code Injection and Policy Violation. 10 were rated high or critical severity. The most severe include Only 41% of skill content could be analyzed. 28 of 52 files are opaque... and Pattern detected: fs.readFileSync(.
How was gram audited?
ClawSecure ran gram through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 52 files from arein/gram.
What does a score of 0 mean?
ClawSecure assigned gram a security score of 0/100, placing it in the High Risk range. This is driven by 15 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for gram
ClawSecure detected 15 security findings in gram, spanning Data Exfiltration, Code Injection, Policy Violation and Obfuscation.
- high · Only 41% of skill content could be analyzed. 28 of 52 files are opaque.... Policy Violation finding.
- high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
src/lib/version.ts:14. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
src/lib/version.ts:27. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
src/lib/version.ts:93. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
src/lib/version.ts:113. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
src/lib/version.ts:121. - high · Pattern detected: fs.readFileSync(. Data Exfiltration finding detected in
src/lib/version.ts:160. - high · Potentially dangerous code pattern detected: exec\(. Code Injection finding detected in
instagram-client-read.ts. - high · Potentially dangerous code pattern detected: exec\(. Code Injection finding detected in
runtime-query-ids.ts. - high · Potentially dangerous code pattern detected: exec\(. Code Injection finding detected in
version.ts. - medium · Pattern detected: fetch(. Data Exfiltration finding detected in
src/lib/instagram-client-base.ts:83. - medium · Pattern detected: fetch(. Data Exfiltration finding detected in
src/lib/instagram-client-base.ts:89.
Showing the 12 highest-severity of 15 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for gram
Audit external network connections
Eliminate dynamic code execution
Resolve policy violations
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on May 2, 2026. gram is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.