ClawAudit verdict
greenhelix-agent-commerce-security
Reads local files AND makes external network calls
Security hardening guide covering OWASP Top 10 for agentic commerce applications; educational content with sandbox examples that requires no code execution and poses no exfiltration risk.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but ClawAudit detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Reads local files AND makes external network calls — the capabilities for data exfiltration co-occur (data-flow not verified)
LLM02 · LLM06 · ASI03
Reads files, encodes data, AND makes external network calls — the obfuscated-exfiltration pattern (data-flow not verified)
LLM02 · ASI03
Permission integrity
network_out
file_read
Findings (4)
Raw model control tokens — prompt injection via token manipulation
SKILL.md · code · <|im_start|>
Reads /proc/self/environ — dumps all environment variables
SKILL.md · prose · downgraded · /proc/self/environ
Popular HTTP library — network access
SKILL.md · code · got
Python os.environ.get — reads environment variable
SKILL.md · code · os.environ.get(
Permissions & capabilities
Requires 3 environment variables. (2 sensitive: GREENHELIX_API_KEY, STRIPE_API_KEY).
network_outcredential_accessdata_encodingfile_read Thanks — recorded.