ClawAudit verdict
clawhub
cerbug45-agent-crypto-message
Both reads and writes files
The skill enables secure encrypted messaging between AI agents, with end-to-end encryption, public key infrastructure, and agent identity verification.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but ClawAudit detects co-occurrence โ it does not verify that one flows into another. Read the code to confirm a live chain.
Both reads and writes files โ verify scope is limited to intended directories
LLM06 ยท ASI02
Permission integrity
file_read+write
Findings (2)
Base64 encoding/decoding
SKILL.md ยท code ยท base64_encode
Python directory traversal
SKILL.md ยท code ยท os.listdir(
Permissions & capabilities
No declared permissions โ minimal attack surface.
data_encodingfile_readfile_writedir_traversal Thanks โ recorded.