perry-coding-agents Security Audit Report
perry-coding-agents is an AI agent skill, created by gricha and published at openclaw/skills. ClawSecure audited perry-coding-agents across 2 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 15/100 (High Risk). The 6 findings concentrate in Hardcoded Secrets, Policy Violation and Permissions Manifest, including Detects potential exposure of sensitive information like API keys,... and Detects potential exposure of sensitive information like API keys,.... 4 were rated high or critical severity.
Is perry-coding-agents safe?
ClawSecure audited perry-coding-agents and assigned a security score of 15/100 (High Risk), identifying 6 findings across Hardcoded Secrets and Policy Violation. Review the findings below before installing.
What did ClawSecure find in perry-coding-agents?
ClawSecure identified 6 findings in perry-coding-agents, concentrated in Hardcoded Secrets, Policy Violation and Permissions Manifest. 4 were rated high or critical severity. The most severe include Detects potential exposure of sensitive information like API keys,... and Detects potential exposure of sensitive information like API keys,....
How was perry-coding-agents audited?
ClawSecure ran perry-coding-agents through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 2 files from openclaw/skills.
What does a score of 15 mean?
ClawSecure assigned perry-coding-agents a security score of 15/100, placing it in the High Risk range. This is driven by 6 findings led by Hardcoded Secrets that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for perry-coding-agents
ClawSecure detected 6 security findings in perry-coding-agents, spanning Hardcoded Secrets, Policy Violation and Permissions Manifest.
- critical · Detects potential exposure of sensitive information like API keys,.... Hardcoded Secrets finding detected in
SKILL.md:28. - critical · Detects potential exposure of sensitive information like API keys,.... Hardcoded Secrets finding detected in
SKILL.md:28. - critical · Detects potential exposure of sensitive information like API keys,.... Hardcoded Secrets finding detected in
SKILL.md:48. - critical · Detects potential exposure of sensitive information like API keys,.... Hardcoded Secrets finding detected in
SKILL.md:48. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for perry-coding-agents
Resolve policy violations
Add a config.json permissions manifest
Pin dependencies to exact versions
1.2.3 instead of ^1.2.3) to keep unauthorized code out of your dependency tree. ClawSecure checks every dependency against known CVE databases.Related Security Research
OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→Understanding Our 3-Layer Audit Protocol→Related AI Agent Security Audits
Scanned on February 7, 2026. perry-coding-agents is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.