ClawAudit verdict
processon-diagram-generator
processon-diagramgen
The skill executes a node command to check the cloud version and updates itself if necessary. While this is not inherently malicious, it could pose a security risk if the command is tampered with or if the update process is hijacked.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class C). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.