security-check
Automates security audits for Clawdbot skills, detecting vulnerabilities and ensuring compliance with security standards.
Install this skill
Security score
The security-check skill was audited on Feb 9, 2026 and we found 13 security issues across 3 threat categories, including 6 critical. Review the findings below before installing.
Categories Tested
Security Issues
Direct command execution function call
| 114 | - ❌ No eval() or exec() with user input |
Direct command execution function call
| 223 | - eval() or exec() with untrusted input |
Eval function call - arbitrary code execution
| 114 | - ❌ No eval() or exec() with user input |
Eval function call - arbitrary code execution
| 223 | - eval() or exec() with untrusted input |
System command execution
| 69 | "issue": "os.system() usage detected", |
Python os.system command execution
| 69 | "issue": "os.system() usage detected", |
Access to hidden dotfiles in home directory
| 184 | - `~/.clawdbot/credentials/` |
Access to hidden dotfiles in home directory
| 185 | - `~/.aws/credentials` |
Access to hidden dotfiles in home directory
| 186 | - `~/.ssh/` directory |
Access to hidden dotfiles in home directory
| 187 | - `~/.npmrc` and other config files |
Access to SSH directory
| 186 | - `~/.ssh/` directory |
Access to AWS credentials directory
| 185 | - `~/.aws/credentials` |
Access to system keychain/keyring
| 189 | - System keychain |