ClawAudit verdict
estimator-pro
raai-estimator-pro
Russian construction estimating assistant with no capabilities and no network access; content is a prompt persona and methodology guide for cost estimation referencing Russian regulatory norms, with no suspicious behavior.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (1)
Unicode homoglyph detected โ uses lookalike characters to evade pattern matching
marketing/testimonial-template.md ยท code
Permissions & capabilities
No declared permissions โ minimal attack surface.
Is this flag fair?
Thanks โ recorded.