ClawAudit verdict
seazenai-orchestrator
seazenaidevskill
Enterprise R&D orchestration skill that installs a file/directory structure into projects and guides users through development phases; all actions are local file creation with explicit user consent required at each step.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (4)
<script> tag in markdown — potential code injection
templates/conventions/vue-frontend.md · code · <script
Dynamic import() — loads module at runtime
templates/conventions/vue-frontend.md · code · import('
References agent configuration files
SKILL.md · code · CLAUDE.md
Popular HTTP library — network access
templates/conventions/vue-frontend.md · prose · downgraded · axios
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.