ClawAudit verdict
workswith-claw
The skill requires access to Home Assistant API and local storage, which could be a concern if not used legitimately.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
package_install
Findings (5)
Pipe to python — executes piped content as Python code
SKILL.md · prose · downgraded · | Python
Possible hardcoded credential
src/api/routes/intent.py · prose · downgraded · token="your_token_here
HTTP request to bare IP address — common in malicious payloads
src/api/routes/apply.py · prose · downgraded · http://192.168.31.27
Python os.getenv — reads environment variable
src/api/routes/apply.py · prose · downgraded · os.getenv(
Python aiohttp session — async network access
src/services/ha_client.py · prose · downgraded · aiohttp.ClientSession
Permissions & capabilities
No declared permissions — minimal attack surface.
package_install Is this flag fair?
Thanks — recorded.