narrator is an AI agent skill, created by buddyh and published at openclaw/skills. ClawSecure audited narrator across 5 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 75/100 (Medium Risk). The 4 findings concentrate in Unauthorized Tool Use, Policy Violation and Permissions Manifest, including Detects system manipulation, privilege escalation, and destructive file... and Detects system manipulation, privilege escalation, and destructive file.... 2 were rated high or critical severity.
Is narrator safe?
ClawSecure audited narrator and assigned a security score of 75/100 (Medium Risk), identifying 4 findings across Unauthorized Tool Use and Policy Violation. Review the findings below before installing.
What did ClawSecure find in narrator?
ClawSecure identified 4 findings in narrator, concentrated in Unauthorized Tool Use, Policy Violation and Permissions Manifest. 2 were rated high or critical severity. The most severe include Detects system manipulation, privilege escalation, and destructive file... and Detects system manipulation, privilege escalation, and destructive file....
How was narrator audited?
ClawSecure ran narrator through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 5 files from openclaw/skills.
What does a score of 75 mean?
ClawSecure assigned narrator a security score of 75/100, placing it in the Medium Risk range. This reflects 4 findings led by Unauthorized Tool Use that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for narrator
ClawSecure detected 4 security findings in narrator, spanning Unauthorized Tool Use, Policy Violation and Permissions Manifest.
- high · Detects system manipulation, privilege escalation, and destructive file.... Unauthorized Tool Use finding detected in
horror_demo.py:18. - high · Detects system manipulation, privilege escalation, and destructive file.... Unauthorized Tool Use finding detected in
horror_demo.py:32. - medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
- info · Skill manifest does not include a 'license' field. Specifying a license.... Policy Violation finding detected in
SKILL.md.
Each finding is expandable in the interactive list below.
3-Layer Audit Protocol
Security Recommendations for narrator
Resolve policy violations
Add a config.json permissions manifest
Pin dependencies to exact versions
1.2.3 instead of ^1.2.3) to keep unauthorized code out of your dependency tree. ClawSecure checks every dependency against known CVE databases.Related Security Research
OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→Understanding Our 3-Layer Audit Protocol→How to Secure an MCP Server: The 2026 Guide→Related AI Agent Security Audits
Scanned on February 18, 2026. narrator is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.