ClawAudit verdict
auto-collaboration-dev-pipeline
88
🟢 Trusted
Low risk — reviewed by ClawAudit, behavior matches stated purpose
Multi-role automated code development pipeline that orchestrates sub-agents (requirements, architecture, dev, QA, docs) for complex code tasks; all operations are local code generation and review with no credential access or data exfiltration.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
80
security
80
transparency
70
maintenance
Findings (1)
Pattern match high
Uses spawn() — can execute external programs
SKILL.md · code · spawn(
Permissions & capabilities
No declared permissions — minimal attack surface.
process_exec Is this flag fair?
Thanks — recorded.