security-monitor

Fail

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/monitor.cjs uses child_process.execSync to run system commands such as tail, ss, netstat, ps, and docker to perform monitoring checks.
  • [CREDENTIALS_UNSAFE]: The skill explicitly reads sensitive environment files located at /root/clawd/skills/.env and /root/clawd/.env to identify the presence of API keys for various services.
  • [DATA_EXFILTRATION]: The skill accesses protected system files, including /var/log/auth.log and /var/log/syslog, and writes logs containing potentially sensitive information to the root directory.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 13, 2026, 07:00 AM