ClawAudit verdict
skill-vetter-guide
A procedural guide instructing agents how to vet third-party skills before installation with no code that exfiltrates data or executes untrusted input.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (5)
Uses eval() — can execute arbitrary code
SKILL.md · prose · downgraded · eval(
References sudo — requests elevated privileges
references/prompt-templates.md · code · sudo
Uses exec() — may execute shell commands
SKILL.md · prose · downgraded · exec(
Accesses cloud provider credentials
SKILL.md · prose · downgraded · ~/.aws
References agent memory files
SKILL.md · prose · downgraded · MEMORY.md
Permissions & capabilities
No declared permissions — minimal attack surface.
dynamic_eval Is this flag fair?
Thanks — recorded.