← Back to Scanner

mission-control Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower
Source:
SHA-256:

mission-control is an AI agent skill, created by builderz-labs and published at builderz-labs/mission-control. ClawSecure audited mission-control across 53 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 38/100 (High Risk). The 8 findings concentrate in Command Injection, Unauthorized Tool Use and Malicious Code, including Suspicious Pattern: sudo systemctl and Pipeline downloads data from the network and executes it:…. 4 were rated high or critical severity.

Is mission-control safe?

ClawSecure audited mission-control and assigned a security score of 38/100 (High Risk), identifying 8 findings across Command Injection and Unauthorized Tool Use. Review the findings below before installing.

What did ClawSecure find in mission-control?

ClawSecure identified 8 findings in mission-control, concentrated in Command Injection, Unauthorized Tool Use and Malicious Code. 4 were rated high or critical severity. The most severe include Suspicious Pattern: sudo systemctl and Pipeline downloads data from the network and executes it:….

How was mission-control audited?

ClawSecure ran mission-control through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 53 files from builderz-labs/mission-control.

What does a score of 38 mean?

ClawSecure assigned mission-control a security score of 38/100, placing it in the High Risk range. This is driven by 8 findings led by Command Injection that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for mission-control

ClawSecure detected 8 security findings in mission-control, spanning Command Injection, Unauthorized Tool Use, Malicious Code and Code Injection.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for mission-control

Harden command execution
mission-control constructs or runs system commands. Validate that commands are built only from trusted inputs, never pass user-controlled strings directly to a shell, and restrict execution to an allow-list of expected commands.
Audit external network connections
mission-control connects to external endpoints. Verify every outbound connection goes to a trusted destination. Unauthorized callbacks are a primary indicator of ClawHavoc malware and data exfiltration. ClawSecure's proprietary engine monitors for known malicious endpoints including C2 infrastructure.
Eliminate dynamic code execution
mission-control evaluates code at runtime (for example eval or dynamic exec). Remove dynamic evaluation of untrusted input, and where code generation is unavoidable, sandbox it and validate every input.

Related Security Research

Why Generic Scanners Fail at AI Agent Security→Understanding Our 3-Layer Audit Protocol→

Related AI Agent Security Audits

theagentservice/skillsScore 35/100self-improving-agent-3Score 30/100@openclaw/dashboardScore 45/100s1nthagent/openclawScore 35/100cron-creatorScore 35/100

Scanned on April 8, 2026. mission-control is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan