clawscan is an AI agent skill, created by ClawScan <hey@clawscan.dev> and published at sggolakiya/clawscan. ClawSecure audited clawscan across 26 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 30 findings concentrate in Malicious Code, Code Injection and Supply Chain, including ClawHavoc C2 infrastructure detected: 91.92.242.30 and Suspicious domain detected: webhook.site (potential data…. 29 were rated high or critical severity.
Is clawscan safe?
ClawSecure audited clawscan and assigned a security score of 0/100 (High Risk), identifying 30 findings across Malicious Code and Code Injection. Review the findings below before installing.
What did ClawSecure find in clawscan?
ClawSecure identified 30 findings in clawscan, concentrated in Malicious Code, Code Injection and Supply Chain. 29 were rated high or critical severity. The most severe include ClawHavoc C2 infrastructure detected: 91.92.242.30 and Suspicious domain detected: webhook.site (potential data….
How was clawscan audited?
ClawSecure ran clawscan through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 26 files from sggolakiya/clawscan.
What does a score of 0 mean?
ClawSecure assigned clawscan a security score of 0/100, placing it in the High Risk range. This is driven by 30 findings led by Malicious Code that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for clawscan
ClawSecure detected 30 security findings in clawscan, spanning Malicious Code, Code Injection, Supply Chain and Permissions Manifest.
- critical · ClawHavoc C2 infrastructure detected: 91.92.242.30. Malicious Code finding detected in
README.md. - critical · Suspicious domain detected: webhook.site (potential data…. Malicious Code finding detected in
README.md. - critical · ClawHavoc C2 infrastructure detected: 91.92.242.30. Malicious Code finding detected in
blocklist.json. - critical · ClawHavoc C2 infrastructure detected: 91.92.242.0/24. Malicious Code finding detected in
blocklist.json. - critical · Suspicious domain detected: webhook.site (potential data…. Malicious Code finding detected in
blocklist.json. - critical · ClawHavoc C2 infrastructure detected: 91.92.242.30. Malicious Code finding detected in
SKILL.md. - critical · ClawHavoc C2 infrastructure detected: 91.92.242.30. Malicious Code finding detected in
setup.sh. - critical · Suspicious domain detected: webhook.site (potential data…. Malicious Code finding detected in
setup.sh. - critical · ClawHavoc C2 infrastructure detected: 91.92.242.30. Malicious Code finding detected in
stealer.py. - high · Attempts to access sensitive file: .clawdbot/.env. Malicious Code finding detected in
README.md. - high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in
patterns.json. - high · Attempts to access sensitive file: .ssh/. Malicious Code finding detected in
SKILL.md.
Showing the 12 highest-severity of 30 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for clawscan
Audit external network connections
Eliminate dynamic code execution
Update and pin dependencies
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on March 5, 2026. clawscan is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.