business-acceptance-report Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

business-acceptance-report is an AI agent skill. ClawSecure audited business-acceptance-report across 5 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 63/100 (Medium Risk). The 7 findings concentrate in Command Injection, Tool Chaining Abuse and Data Exfiltration, including Variable $auth_args (line 4) flows to `curl` at line 8. and Variable $auth_args (line 4) flows to `curl` at line 8.. 2 were rated high or critical severity.

Is business-acceptance-report safe?

ClawSecure audited business-acceptance-report and assigned a security score of 63/100 (Medium Risk), identifying 7 findings across Command Injection and Tool Chaining Abuse. Review the findings below before installing.

What did ClawSecure find in business-acceptance-report?

ClawSecure identified 7 findings in business-acceptance-report, concentrated in Command Injection, Tool Chaining Abuse and Data Exfiltration. 2 were rated high or critical severity. The most severe include Variable $auth_args (line 4) flows to `curl` at line 8. and Variable $auth_args (line 4) flows to `curl` at line 8..

How was business-acceptance-report audited?

ClawSecure ran business-acceptance-report through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 5 files.

What does a score of 63 mean?

ClawSecure assigned business-acceptance-report a security score of 63/100, placing it in the Medium Risk range. This reflects 7 findings led by Command Injection that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for business-acceptance-report

ClawSecure detected 7 security findings in business-acceptance-report, spanning Command Injection, Tool Chaining Abuse, Data Exfiltration and Verification.

high · Variable $auth_args (line 4) flows to `curl` at line 8.. Command Injection finding detected in references/jira_rest_api.md:148.
high · Variable $auth_args (line 4) flows to `curl` at line 8.. Command Injection finding detected in references/jira_rest_api.md:174.
medium · Detects suspicious tool chaining patterns that could lead…. Tool Chaining Abuse finding detected in SKILL.md:119.
medium · Detects suspicious tool chaining patterns that could lead…. Tool Chaining Abuse finding detected in SKILL.md:127.
medium · Code block in references/confluence_rest_api.md at line 417…. Data Exfiltration finding detected in references/confluence_rest_api.md:417.
low · No GitHub source URL - cannot verify agent origin. Verification finding.
info · Missing License Declaration. Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for business-acceptance-report

Harden command execution

business-acceptance-report constructs or runs system commands. Validate that commands are built only from trusted inputs, never pass user-controlled strings directly to a shell, and restrict execution to an allow-list of expected commands.

Audit external network connections

business-acceptance-report sends data to external endpoints. Confirm each destination is expected and authorized, and remove any callback that exfiltrates data. ClawSecure monitors for known exfiltration and C2 endpoints.

Resolve policy violations

business-acceptance-report trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Related Security Research

Why Generic Scanners Fail at AI Agent Security→Understanding Our 3-Layer Audit Protocol→

Related AI Agent Security Audits

gitlab-cli-skillsScore 55/100 devops-mainScore 75/100 devops-mainScore 75/100 devops-mainScore 75/100 skill-vetter-v2Score 70/100

Scanned on June 12, 2026. business-acceptance-report is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan