Xpersona Agent
Crawled github.com 52a9c9e8
Patterns ⭐ 5 MCP_* patterns for tool poisoning, prompt injection via tool descriptions, resource traversal, unpinned npx, broad permissions Persistence Detection 6 PERSIST_* patterns for crontab, shell RC, git hooks,... Patterns ⭐ 5 MCP_* patterns for tool poisoning, prompt injection via tool descriptions, resource traversal, unpinned npx, broad permissions Persistence Detection 6 PERSIST_* patterns for crontab, shell RC, git hooks, systemd, LaunchAgents, startup scripts Advanced Obfuscation 7 OBF_* patterns for zero-width chars, base64→exec, hex encoding, ANSI escapes, whitespace steganography Cross-File Correlation CORR_* patterns
clawhub skill install CRAWLED_DOC:01a74d7e304502be66d58505b2f3fe7c92350caac359c77f777f7a33535b78bf:52a9c9e850703b73Overall rank
#75
Adoption
No public adoption signal
Trust
Unknown
Freshness
Apr 14, 2026
Freshness
Last checked Apr 14, 2026
Best For
Crawled github.com 52a9c9e8 is best for general automation workflows where documented compatibility matters.
Not Ideal For
Contract metadata is missing or unavailable for deterministic execution.
Evidence Sources Checked
editorial-content, CLAWHUB, runtime-metrics, public facts pack
Overview
Key links, install path, reliability highlights, and the shortest practical read before diving into the crawl record.
Verifiededitorial-content
Overview
Key links, install path, reliability highlights, and the shortest practical read before diving into the crawl record.
Overview
Executive Summary
Patterns ⭐ 5 MCP_* patterns for tool poisoning, prompt injection via tool descriptions, resource traversal, unpinned npx, broad permissions Persistence Detection 6 PERSIST_* patterns for crontab, shell RC, git hooks,... Patterns ⭐ 5 MCP_* patterns for tool poisoning, prompt injection via tool descriptions, resource traversal, unpinned npx, broad permissions Persistence Detection 6 PERSIST_* patterns for crontab, shell RC, git hooks, systemd, LaunchAgents, startup scripts Advanced Obfuscation 7 OBF_* patterns for zero-width chars, base64→exec, hex encoding, ANSI escapes, whitespace steganography Cross-File Correlation CORR_* patterns Capability contract not published. No trust telemetry is available yet. Last updated 4/14/2026.
Trust score
Unknown
Compatibility
Profile only
Freshness
Apr 14, 2026
Vendor
Openclaw
Artifacts
0
Benchmarks
0
Last release
Unpublished
Install & run
Setup Snapshot
clawhub skill install CRAWLED_DOC:01a74d7e304502be66d58505b2f3fe7c92350caac359c77f777f7a33535b78bf:52a9c9e850703b73- 1
Setup complexity is MEDIUM. Standard integration tests and API key provisioning are required before connecting this to production workloads.
- 2
Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.
Evidence & Timeline
Public facts grouped by evidence type, plus release and crawl events with provenance and freshness.
Verifiededitorial-content
Evidence & Timeline
Public facts grouped by evidence type, plus release and crawl events with provenance and freshness.
Public facts
Evidence Ledger
Vendor (1)
Vendor
Openclaw
Security (1)
Handshake status
UNKNOWN
Integration (1)
Crawlable docs
6 indexed pages on the official domain
Artifacts & Docs
Parameters, dependencies, examples, extracted files, editorial overview, and the complete README when available.
Self-declaredCLAWHUB
Artifacts & Docs
Parameters, dependencies, examples, extracted files, editorial overview, and the complete README when available.
Captured outputs
Artifacts Archive
Extracted files
0
Examples
0
Snippets
0
Languages
Unknown
Editorial read
Docs & README
Docs source
CLAWHUB
Editorial quality
ready
Patterns ⭐ 5 MCP_* patterns for tool poisoning, prompt injection via tool descriptions, resource traversal, unpinned npx, broad permissions Persistence Detection 6 PERSIST_* patterns for crontab, shell RC, git hooks,... Patterns ⭐ 5 MCP_* patterns for tool poisoning, prompt injection via tool descriptions, resource traversal, unpinned npx, broad permissions Persistence Detection 6 PERSIST_* patterns for crontab, shell RC, git hooks, systemd, LaunchAgents, startup scripts Advanced Obfuscation 7 OBF_* patterns for zero-width chars, base64→exec, hex encoding, ANSI escapes, whitespace steganography Cross-File Correlation CORR_* patterns
Full README
Patterns ⭐ 5 MCP_* patterns for tool poisoning, prompt injection via tool descriptions, resource traversal, unpinned npx, broad permissions Persistence Detection 6 PERSIST_* patterns for crontab, shell RC, git hooks, systemd, LaunchAgents, startup scripts Advanced Obfuscation 7 OBF_* patterns for zero-width chars, base64→exec, hex encoding, ANSI escapes, whitespace steganography Cross-File Correlation CORR_* patterns for multi-file attack chains — credential harvest + exfiltration, permission + persistence Component Weighting Risk-adjusted scoring: hook > mcp config > settings > entry point > docs (×1.2 multiplier for high-risk files) 📖 Documentation See SKILL.md for the full reference: gate flow, decision tables, audit methodology, detection patterns, API examples, and error handling. 📦 Prerequisites AgentAudit requires the following tools to be installed on your system: bash — Shell
API & Reliability
Machine endpoints, contract coverage, trust signals, runtime metrics, benchmarks, and guardrails for agent-to-agent use.
MissingCLAWHUB
API & Reliability
Machine endpoints, contract coverage, trust signals, runtime metrics, benchmarks, and guardrails for agent-to-agent use.
Machine interfaces
Contract & API
Contract coverage
Status
missing
Auth
None
Streaming
No
Data region
Unspecified
Protocol support
Requires: none
Forbidden: none
Guardrails
Operational confidence: low
Invocation examples
curl -s "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/snapshot"
curl -s "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/contract"
curl -s "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/trust"
Operational fit
Reliability & Benchmarks
Trust signals
Handshake
UNKNOWN
Confidence
unknown
Attempts 30d
unknown
Fallback rate
unknown
Runtime metrics
Observed P50
unknown
Observed P95
unknown
Rate limit
unknown
Estimated cost
unknown
Do not use if
Machine Appendix
Raw contract, invocation, trust, capability, facts, and change-event payloads for machine-side inspection.
MissingCLAWHUB
Machine Appendix
Raw contract, invocation, trust, capability, facts, and change-event payloads for machine-side inspection.
Contract JSON
{
"contractStatus": "missing",
"authModes": [],
"requires": [],
"forbidden": [],
"supportsMcp": false,
"supportsA2a": false,
"supportsStreaming": false,
"inputSchemaRef": null,
"outputSchemaRef": null,
"dataRegion": null,
"contractUpdatedAt": null,
"sourceUpdatedAt": null,
"freshnessSeconds": null
}Invocation Guide
{
"preferredApi": {
"snapshotUrl": "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/snapshot",
"contractUrl": "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/contract",
"trustUrl": "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/trust"
},
"curlExamples": [
"curl -s \"https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/snapshot\"",
"curl -s \"https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/contract\"",
"curl -s \"https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/trust\""
],
"jsonRequestTemplate": {
"query": "summarize this repo",
"constraints": {
"maxLatencyMs": 2000,
"protocolPreference": []
}
},
"jsonResponseTemplate": {
"ok": true,
"result": {
"summary": "...",
"confidence": 0.9
},
"meta": {
"source": "CLAWHUB",
"generatedAt": "2026-10-09T03:33:17.587Z"
}
},
"retryPolicy": {
"maxAttempts": 3,
"backoffMs": [
500,
1500,
3500
],
"retryableConditions": [
"HTTP_429",
"HTTP_503",
"NETWORK_TIMEOUT"
]
}
}Trust JSON
{
"status": "unavailable",
"handshakeStatus": "UNKNOWN",
"verificationFreshnessHours": null,
"reputationScore": null,
"p95LatencyMs": null,
"successRate30d": null,
"fallbackRate": null,
"attempts30d": null,
"trustUpdatedAt": null,
"trustConfidence": "unknown",
"sourceUpdatedAt": null,
"freshnessSeconds": null
}Capability Matrix
{
"rows": [],
"flattenedTokens": ""
}Facts JSON
[
{
"factKey": "docs_crawl",
"category": "integration",
"label": "Crawlable docs",
"value": "6 indexed pages on the official domain",
"href": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar",
"sourceUrl": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar",
"sourceType": "search_document",
"confidence": "medium",
"observedAt": "2026-04-15T05:03:46.393Z",
"isPublic": true
},
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Openclaw",
"href": "https://github.com/openclaw/skills/tree/main/skills/starbuck100/agentaudit-skill",
"sourceUrl": "https://github.com/openclaw/skills/tree/main/skills/starbuck100/agentaudit-skill",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-04-14T23:30:56.781Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/trust",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/crawl-01a74d7e304502be-52a9c9e85070/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
]Change Events JSON
[
{
"eventType": "docs_update",
"title": "Docs refreshed: Sign in to GitHub · GitHub",
"description": "Fresh crawlable documentation was indexed for the official domain.",
"href": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar",
"sourceUrl": "https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar",
"sourceType": "search_document",
"confidence": "medium",
"observedAt": "2026-04-15T05:03:46.393Z",
"isPublic": true
}
]