ClawAudit verdict
volc-flink-skill
Volcengine Flink management skill that routes user intents to appropriate sub-skills; reads optional VOLCENGINE_ACCESS_KEY/SECRET_KEY from env for authentication with the documented CLI tool with no exfiltration.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (3)
Possible hardcoded credential
skills/flink-sql/assets/tls.md · code · password="<ak>#<sk>
Recursive delete from root or home — destructive command
skills/flink-volc/SKILL.md · code · rm -rf ~
References sudo — requests elevated privileges
skills/flink-volc/SKILL.md · code · sudo
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.