← Back to Scanner

497efdadce36b9af Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower
Source:
SHA-256:

497efdadce36b9af is an AI agent skill, created by adversa-ai and published at adversa-ai/secureclaw. ClawSecure audited 497efdadce36b9af across 71 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 99 findings concentrate in Malicious Code, Code Injection and Cve, including CVE-2026-25253: Dangerous configuration modification… and Suspicious domain detected: webhook.site (potential data…. 98 were rated high or critical severity.

Is 497efdadce36b9af safe?

ClawSecure audited 497efdadce36b9af and assigned a security score of 0/100 (High Risk), identifying 99 findings across Malicious Code and Code Injection. Review the findings below before installing.

What did ClawSecure find in 497efdadce36b9af?

ClawSecure identified 99 findings in 497efdadce36b9af, concentrated in Malicious Code, Code Injection and Cve. 98 were rated high or critical severity. The most severe include CVE-2026-25253: Dangerous configuration modification… and Suspicious domain detected: webhook.site (potential data….

How was 497efdadce36b9af audited?

ClawSecure ran 497efdadce36b9af through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 71 files from adversa-ai/secureclaw.

What does a score of 0 mean?

ClawSecure assigned 497efdadce36b9af a security score of 0/100, placing it in the High Risk range. This is driven by 99 findings led by Malicious Code that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for 497efdadce36b9af

ClawSecure detected 99 security findings in 497efdadce36b9af, spanning Malicious Code, Code Injection, Cve and Permissions Manifest.

Showing the 12 highest-severity of 99 findings. The full interactive list appears below.

3-Layer Audit Protocol

Security Recommendations for 497efdadce36b9af

Audit external network connections
497efdadce36b9af connects to external endpoints. Verify every outbound connection goes to a trusted destination. Unauthorized callbacks are a primary indicator of ClawHavoc malware and data exfiltration. ClawSecure's proprietary engine monitors for known malicious endpoints including C2 infrastructure.
Eliminate dynamic code execution
497efdadce36b9af evaluates code at runtime (for example eval or dynamic exec). Remove dynamic evaluation of untrusted input, and where code generation is unavoidable, sandbox it and validate every input.
Add a config.json permissions manifest
A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Related Security Research

ClawHavoc Explained: The Malware Family Targeting AI AgentsBeyond Static Scans: Why ClawSecure Verifies Agentic Intent

Related AI Agent Security Audits

understand-anythingScore 0/100memUScore 0/10062ac696296b54aadScore 0/1006bc837afc1a86e89Score 0/10062ac696296b54aadScore 0/100

Scanned on March 14, 2026. 497efdadce36b9af is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan