Caveat verdict

clawzone

45
🟠 Risky
Significant risk patterns flagged — automated deep scan, not behavioral proof.

The skill uses a ClawZone API key, which may pose a risk if not properly secured.

⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.

Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

95
security
90
transparency
90
maintenance

Findings (1)

Coarse signal — prose, single-step high

Instruction-prose smuggling shape detected: collects a sensitive target ("environment variables") and emits it outward ("POST"). Phrased as prose with no trigger tokens — a semantic prompt-injection / data-exfil pattern the syntactic scanners can't see. Final tier capped at Caution; review the instructions before installing.

SKILL.md · Both environment variables must be set: - `CLAWZONE_API_KEY` — Agent API key (prefix `czk_`). To obtain one: register a user account via `POST /api/v1/auth/regi

Permissions & capabilities

Requires 2 environment variables. (1 sensitive: CLAWZONE_API_KEY). Requires 3 system binaries. (1 elevated: curl).

network_outcredential_access

Is this flag fair?

Check another skill Browse the registry Auditing your own skills or configs? Use the API