chaos-mind is an AI agent skill, created by hargabyte and published at hargabyte/chaos-mind. ClawSecure audited chaos-mind across 15 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 19 findings concentrate in Command Injection, Code Injection and Unauthorized Tool Use, including Pattern detected: sudo systemctl and Pattern detected: sudo systemctl. 14 were rated high or critical severity.
Is chaos-mind safe?
ClawSecure audited chaos-mind and assigned a security score of 0/100 (High Risk), identifying 19 findings across Command Injection and Code Injection. Review the findings below before installing.
What did ClawSecure find in chaos-mind?
ClawSecure identified 19 findings in chaos-mind, concentrated in Command Injection, Code Injection and Unauthorized Tool Use. 14 were rated high or critical severity. The most severe include Pattern detected: sudo systemctl and Pattern detected: sudo systemctl.
How was chaos-mind audited?
ClawSecure ran chaos-mind through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 15 files from hargabyte/chaos-mind.
What does a score of 0 mean?
ClawSecure assigned chaos-mind a security score of 0/100, placing it in the High Risk range. This is driven by 19 findings led by Command Injection that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for chaos-mind
ClawSecure detected 19 security findings in chaos-mind, spanning Command Injection, Code Injection, Unauthorized Tool Use and Policy Violation.
- critical · Pattern detected: sudo systemctl. Unauthorized Tool Use finding detected in
scripts/setup-service.sh:58. - critical · Pattern detected: sudo systemctl. Unauthorized Tool Use finding detected in
scripts/setup-service.sh:65. - critical · Pattern detected: sudo systemctl. Unauthorized Tool Use finding detected in
scripts/setup-service.sh:66. - critical · Pattern detected: sudo systemctl. Unauthorized Tool Use finding detected in
scripts/setup-service.sh:67. - high · Pipeline downloads data from the network and executes it: `curl -fsSL.... Command Injection finding detected in
INSTALL_NOTES.md:5. - high · Pipeline downloads data from the network and executes it: `curl -fsSL.... Command Injection finding detected in
RELEASE_INSTRUCTIONS.md:1. - high · Pipeline downloads data from the network and executes it: `curl -fsSL.... Command Injection finding detected in
RELEASE_SUMMARY.md:5. - high · Pipeline downloads data from the network and executes it: `curl |.... Command Injection finding detected in
SECURITY.md:1. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
INSTALL_NOTES.md. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
README.md. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
RELEASE_INSTRUCTIONS.md. - high · Potentially dangerous code pattern detected: curl.*\|.*sh. Code Injection finding detected in
RELEASE_SUMMARY.md.
Showing the 12 highest-severity of 19 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for chaos-mind
Harden command execution
Eliminate dynamic code execution
Resolve policy violations
Related Security Research
Why Generic Scanners Fail at AI Agent Security→Understanding Our 3-Layer Audit Protocol→Related AI Agent Security Audits
Scanned on May 2, 2026. chaos-mind is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.