ansible-skill Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

ansible-skill is an AI agent skill, created by botond-rackhost and published at botond-rackhost/ansible-skill. ClawSecure audited ansible-skill across 22 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 55/100 (Medium Risk). The 6 findings concentrate in Malicious Code, Policy Violation and Permissions Manifest, including Attempts to access sensitive file: .ssh/ and Attempts to access sensitive file: .ssh/. 4 were rated high or critical severity.

Is ansible-skill safe?

ClawSecure audited ansible-skill and assigned a security score of 55/100 (Medium Risk), identifying 6 findings across Malicious Code and Policy Violation. Review the findings below before installing.

What did ClawSecure find in ansible-skill?

ClawSecure identified 6 findings in ansible-skill, concentrated in Malicious Code, Policy Violation and Permissions Manifest. 4 were rated high or critical severity. The most severe include Attempts to access sensitive file: .ssh/ and Attempts to access sensitive file: .ssh/.

How was ansible-skill audited?

ClawSecure ran ansible-skill through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 22 files from botond-rackhost/ansible-skill.

What does a score of 55 mean?

ClawSecure assigned ansible-skill a security score of 55/100, placing it in the Medium Risk range. This reflects 6 findings led by Malicious Code that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for ansible-skill

ClawSecure detected 6 security findings in ansible-skill, spanning Malicious Code, Policy Violation and Permissions Manifest.

high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in SKILL.md.
high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in hosts.yml.
high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in modules-cheatsheet.md.
high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in troubleshooting.md.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for ansible-skill

Audit external network connections

ansible-skill connects to external endpoints. Verify every outbound connection goes to a trusted destination. Unauthorized callbacks are a primary indicator of ClawHavoc malware and data exfiltration. ClawSecure's proprietary engine monitors for known malicious endpoints including C2 infrastructure.

Resolve policy violations

ansible-skill trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Add a config.json permissions manifest

A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Related Security Research

ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→

Related AI Agent Security Audits

Anthropic-Cybersecurity-SkillsScore 70/100 ClawSecScore 45/100 openclawScore 55/100 aitorScore 61/100 gnoScore 45/100

Scanned on May 4, 2026. ansible-skill is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan