lobsterhood Security Audit Report
lobsterhood is an AI agent skill, created by dub88 and published at dub88/lobsterhood. ClawSecure audited lobsterhood across 19 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 65/100 (Medium Risk). The 12 findings concentrate in Supply Chain, Policy Violation and Permissions Manifest, including Only 53% of skill content could be analyzed. 10 of 19 files are opaque... and Vulnerability in next@14.2.35: Next.js HTTP request deserialization can.... 3 were rated high or critical severity.
Is lobsterhood safe?
ClawSecure audited lobsterhood and assigned a security score of 65/100 (Medium Risk), identifying 12 findings across Supply Chain and Policy Violation. Review the findings below before installing.
What did ClawSecure find in lobsterhood?
ClawSecure identified 12 findings in lobsterhood, concentrated in Supply Chain, Policy Violation and Permissions Manifest. 3 were rated high or critical severity. The most severe include Only 53% of skill content could be analyzed. 10 of 19 files are opaque... and Vulnerability in next@14.2.35: Next.js HTTP request deserialization can....
How was lobsterhood audited?
ClawSecure ran lobsterhood through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 19 files from dub88/lobsterhood.
What does a score of 65 mean?
ClawSecure assigned lobsterhood a security score of 65/100, placing it in the Medium Risk range. This reflects 12 findings led by Supply Chain that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for lobsterhood
ClawSecure detected 12 security findings in lobsterhood, spanning Supply Chain, Policy Violation and Permissions Manifest.
- high · Only 53% of skill content could be analyzed. 10 of 19 files are opaque.... Policy Violation finding.
- high · Vulnerability in next@14.2.35: Next.js HTTP request deserialization can.... Supply Chain finding detected in
package.json. - high · Vulnerability in next@14.2.35: Next.js has a Denial of Service with.... Supply Chain finding detected in
package.json. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md. - moderate · Vulnerability in next@14.2.35: Next.js: Unbounded next/image disk cache.... Supply Chain finding detected in
package.json. - moderate · Vulnerability in next@14.2.35: Next.js self-hosted applications.... Supply Chain finding detected in
package.json. - moderate · Vulnerability in next@14.2.35: Next.js: HTTP request smuggling in.... Supply Chain finding detected in
package.json. - moderate · Vulnerability in postcss@8: Regular Expression Denial of Service in.... Supply Chain finding detected in
package.json. - moderate · Vulnerability in postcss@8: PostCSS line return parsing error. Supply Chain finding detected in
package.json. - moderate · Vulnerability in postcss@8: Regular Expression Denial of Service in.... Supply Chain finding detected in
package.json. - moderate · Vulnerability in postcss@8: PostCSS has XSS via Unescaped </style> in.... Supply Chain finding detected in
package.json.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for lobsterhood
Update and pin dependencies
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
AI Agent Supply Chain Attacks: How Dependencies Become Weapons→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on May 6, 2026. lobsterhood is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.