ClawAudit verdict
clawdio
clawdiocomms
The skill provides secure P2P communication for AI agents via Telegram. It does not appear to contain any malicious code and handles encryption and connection consent in a standard way.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
package_install
Findings (4)
Base64 encoding/decoding
SKILL.md · code · base64Encode
References child_process — can spawn system processes
scripts/start.js · prose · downgraded · child_process
Uses exec() — may execute shell commands
scripts/start.js · prose · downgraded · exec(
Opens WebSocket connection
src/transport.ts · prose · downgraded · WebSocket
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class D). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
package_installdata_encoding Is this flag fair?
Thanks — recorded.