frontend-code-lint Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

frontend-code-lint is an AI agent skill. ClawSecure audited frontend-code-lint across 11 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 53/100 (Medium Risk). The 8 findings concentrate in Obfuscation, Policy Violation and Code Injection, including Hidden script file found: templates/.eslintrc.template.js.… and Hidden script file found:…. 3 were rated high or critical severity.

Is frontend-code-lint safe?

ClawSecure audited frontend-code-lint and assigned a security score of 53/100 (Medium Risk), identifying 8 findings across Obfuscation and Policy Violation. Review the findings below before installing.

What did ClawSecure find in frontend-code-lint?

ClawSecure identified 8 findings in frontend-code-lint, concentrated in Obfuscation, Policy Violation and Code Injection. 3 were rated high or critical severity. The most severe include Hidden script file found: templates/.eslintrc.template.js.… and Hidden script file found:….

How was frontend-code-lint audited?

ClawSecure ran frontend-code-lint through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 11 files.

What does a score of 53 mean?

ClawSecure assigned frontend-code-lint a security score of 53/100, placing it in the Medium Risk range. This reflects 8 findings led by Obfuscation that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for frontend-code-lint

ClawSecure detected 8 security findings in frontend-code-lint, spanning Obfuscation, Policy Violation, Code Injection and Permissions Manifest.

high · Hidden script file found: templates/.eslintrc.template.js.…. Obfuscation finding detected in templates/.eslintrc.template.js.
high · Hidden script file found:…. Obfuscation finding detected in templates/.stylelintrc.template.js.
high · Potentially dangerous code pattern detected: eval\(. Code Injection finding detected in js-rules.md.
medium · Only 84% of skill content could be analyzed. 2 of 11 files…. Policy Violation finding.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
medium · ReDoS vulnerability: Nested quantifiers (potential…. ReDoS finding detected in .stylelintrc.template.js:6.
low · Hidden file found: templates/.prettierrc.template.json.…. Obfuscation finding detected in templates/.prettierrc.template.json.
info · Missing License Declaration. Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for frontend-code-lint

Review obfuscated or hidden code

frontend-code-lint contains obfuscated or hidden content that resists review. Inspect encoded, minified or hidden files to confirm they are not concealing unexpected behavior before installing.

Resolve policy violations

frontend-code-lint trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Eliminate dynamic code execution

frontend-code-lint evaluates code at runtime (for example eval or dynamic exec). Remove dynamic evaluation of untrusted input, and where code generation is unavoidable, sandbox it and validate every input.

Related Security Research

Why Generic Scanners Fail at AI Agent Security→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→

Related AI Agent Security Audits

gitlab-cli-skillsScore 55/100 skill-creatorScore 65/100 skill-creatorScore 65/100 nginx-analyzeScore 60/100 nginx-analyzeScore 60/100

Scanned on June 12, 2026. frontend-code-lint is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan