ClawAudit verdict
roast-my-code
88
🟢 Trusted
Low risk — reviewed by ClawAudit, behavior matches stated purpose
A humor/educational code review skill that generates satirical roasts and lessons for user-submitted code entirely within the agent context; dynamic_eval capability is not exercised maliciously and no external calls or credential access are present.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
70
security
90
transparency
90
maintenance
Findings (1)
Pattern match critical
Uses eval() — can execute arbitrary code
SKILL.md · code · eval(
Permissions & capabilities
No declared permissions — minimal attack surface.
dynamic_eval Is this flag fair?
Thanks — recorded.