← Back to Scanner

probe-10-curl-pipe Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower
Source:
SHA-256:

probe-10-curl-pipe is an AI agent skill. ClawSecure audited probe-10-curl-pipe across 2 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 15/100 (High Risk). The 7 findings concentrate in Malicious Code, Code Injection and Command Injection, including Detects command injection patterns in agent skills: shell… and ClawHavoc C2 infrastructure detected: 91.92.242.30. 5 were rated high or critical severity.

Is probe-10-curl-pipe safe?

ClawSecure audited probe-10-curl-pipe and assigned a security score of 15/100 (High Risk), identifying 7 findings across Malicious Code and Code Injection. Review the findings below before installing.

What did ClawSecure find in probe-10-curl-pipe?

ClawSecure identified 7 findings in probe-10-curl-pipe, concentrated in Malicious Code, Code Injection and Command Injection. 5 were rated high or critical severity. The most severe include Detects command injection patterns in agent skills: shell… and ClawHavoc C2 infrastructure detected: 91.92.242.30.

How was probe-10-curl-pipe audited?

ClawSecure ran probe-10-curl-pipe through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 2 files.

What does a score of 15 mean?

ClawSecure assigned probe-10-curl-pipe a security score of 15/100, placing it in the High Risk range. This is driven by 7 findings led by Malicious Code that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for probe-10-curl-pipe

ClawSecure detected 7 security findings in probe-10-curl-pipe, spanning Malicious Code, Code Injection, Command Injection and Permissions Manifest.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for probe-10-curl-pipe

Audit external network connections
probe-10-curl-pipe connects to external endpoints. Verify every outbound connection goes to a trusted destination. Unauthorized callbacks are a primary indicator of ClawHavoc malware and data exfiltration. ClawSecure's proprietary engine monitors for known malicious endpoints including C2 infrastructure.
Eliminate dynamic code execution
probe-10-curl-pipe evaluates code at runtime (for example eval or dynamic exec). Remove dynamic evaluation of untrusted input, and where code generation is unavoidable, sandbox it and validate every input.
Harden command execution
probe-10-curl-pipe constructs or runs system commands. Validate that commands are built only from trusted inputs, never pass user-controlled strings directly to a shell, and restrict execution to an allow-list of expected commands.

Related Security Research

ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→

Related AI Agent Security Audits

obsidian-wikiScore 0/100invassistantScore 0/100invassistantScore 0/100claw-controlScore 25/100clip-itScore 0/100

Scanned on March 30, 2026. probe-10-curl-pipe is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan