clawdbot-security

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation references the official Tailscale installation script from https://tailscale.com/install.sh. This is a standard method provided by a well-known service for software deployment.\n- [REMOTE_CODE_EXECUTION]: The provided hardening guide includes a command to pipe the Tailscale installation script directly to a shell for execution. While this pattern involves remote code execution, it targets a well-known and trusted technology service.\n- [COMMAND_EXECUTION]: The security audit CLI tool (cli.js) utilizes child_process.execSync to perform system-level checks, including verifying Tailscale status and testing port accessibility with the nc (netcat) utility. These commands are used locally for diagnostic and auditing purposes.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 02:22 AM