Skip to main content

joelclaw

Manages the joelclaw event bus and infrastructure via CLI, enabling event handling, monitoring, and debugging for efficient operations.

Install this skill

or
62/100

Security score

The joelclaw skill was audited on Mar 7, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 363

Webhook reference - potential data exfiltration

SourceSKILL.md
363| `webhook/github` | GitHub webhook events |
medium line 364

Webhook reference - potential data exfiltration

SourceSKILL.md
364| `webhook/vercel` | Vercel deploy events |
medium line 365

Webhook reference - potential data exfiltration

SourceSKILL.md
365| `webhook/todoist` | Todoist webhook events |
medium line 366

Webhook reference - potential data exfiltration

SourceSKILL.md
366| `webhook/front` | Front webhook events |
medium line 16

Access to hidden dotfiles in home directory

SourceSKILL.md
16Binary: `~/.bun/bin/joelclaw`
medium line 18

Access to hidden dotfiles in home directory

SourceSKILL.md
18Build: `bun build packages/cli/src/cli.ts --compile --outfile ~/.bun/bin/joelclaw`
medium line 430

Access to hidden dotfiles in home directory

SourceSKILL.md
430| CLI binary | `~/.bun/bin/joelclaw` |
low line 447

Access to hidden dotfiles in home directory

SourceSKILL.md
447bun build packages/cli/src/cli.ts --compile --outfile ~/.bun/bin/joelclaw
low line 62

External URL reference

SourceSKILL.md
62joelclaw send "pipeline/video.download" --data '{"url":"https://youtube.com/watch?v=XXX"}'
low line 215

External URL reference

SourceSKILL.md
215joelclaw discover "https://example.com" --context "why this is interesting"
Scanned on Mar 7, 2026
View Security Dashboard