Xpersona
Claim this agent
agentCLAWHUBUnverified

Audit Code

Security-focused code review for hardcoded secrets, dangerous calls, and common vulnerabilities Skill: Audit Code Owner: ItsNishi Summary: Security-focused code review for hardcoded secrets, dangerous calls, and common vulnerabilities Tags: latest:1.0.0, security:1.0.0 Version history: v1.0.0 | 2026-02-07T23:22:00.844Z | user Initial release of audit-code – a security-focused code review skill. - Scans project source code for hardcoded secrets, dangerous calls, and common vulnerabilities (OWASP-style). - Detect

OpenClaw
View on ClawHub

Rank

62

Safety

84

Downloads

1.5k

Updated

Apr 15, 2026

Version

1.0.0

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.5K downloads reported by the source. Last updated 4/15/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Apr 15, 2026
Protocol compatibility
OpenClawcompatibility · observed Apr 15, 2026
Adoption signal
1.5K downloadsadoption · observed Apr 15, 2026
Latest release
1.0.0release · observed Feb 7, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install kn7c4x4srjpbhtjhec7q71202n80phmw:audit-code
  1. Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-audit-code/snapshot"

Documentation

CLAWHUB

2,794 characters of source documentation, loaded on request.

Extracted files

2 files captured from the source.

SKILL.md

---
name: audit-code
description: Security-focused code review for hardcoded secrets, dangerous calls, and common vulnerabilities
disable-model-invocation: true
allowed-tools: Read, Glob, Grep, Bash
context: fork
---

# audit-code -- Project Code Security Review

Security-focused code review of project source code. Covers OWASP-style vulnerabilities, hardcoded secrets, dangerous function calls, and patterns relevant to AI-assisted development.

## What to do

Run the auditor against the target path:

```bash
python3 "$SKILL_DIR/scripts/audit_code.py" "$ARGUMENTS"
```

If `$ARGUMENTS` is empty, default to `$PROJECT_ROOT`.

## What it checks

- **Hardcoded secrets** -- API keys (AWS, GitHub, Stripe, OpenAI, Slack), tokens, private keys, connection strings, passwords
- **Dangerous function calls** -- eval, exec, subprocess with shell=True, child_process.exec, pickle deserialization, system(), gets(), etc.
- **SQL injection** -- String concatenation/interpolation in SQL queries
- **Dependency risks** -- Known hallucinated package names, unverified installations
- **Sensitive files** -- .env files committed to git, credential files in repo
- **File permissions** -- Overly permissive chmod patterns
- **Exfiltration patterns** -- Base64 encode + network send, DNS exfiltration, credential file reads

## Output

Structured report with severity-ranked findings, file locations, and actionable remediation steps.

## When to use

- Before committing or pushing code
- When reviewing third-party contributions or PRs
- As part of a periodic security audit of the codebase
- After AI-assisted code generation to verify no secrets or vulnerabilities were introduced

_meta.json

{
  "ownerId": "kn7c4x4srjpbhtjhec7q71202n80phmw",
  "slug": "audit-code",
  "version": "1.0.0",
  "publishedAt": 1770506520844
}

Related agents

Same protocol, similar job.

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceUrl": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-04-15T00:45:39.800Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-audit-code/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-audit-code/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-04-15T00:45:39.800Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "1.5K downloads",
      "href": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceUrl": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-04-15T00:45:39.800Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "1.0.0",
      "href": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceUrl": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-02-07T23:22:00.844Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-audit-code/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-audit-code/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 1.0.0",
      "description": "Initial release of audit-code – a security-focused code review skill. - Scans project source code for hardcoded secrets, dangerous calls, and common vulnerabilities (OWASP-style). - Detects risky patterns such as eval/exec, insecure SQL, dependency issues, and secrets in files. - Produces a structured, severity-ranked report with file locations and remediation advice. - Designed for pre-commit checks, security audits, and post–AI code generation validation. - Use via CLI with optional path arguments; defaults to scanning the project root.",
      "href": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceUrl": "https://clawhub.ai/ItsNishi/audit-code",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-02-07T23:22:00.844Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 9, 2026.

Sponsored

Ads related to Audit Code and adjacent AI workflows.