gl0di/clawseccheck

gl0di/clawseccheck · SKILL.md · Free, local, read-only security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files…

gl0di/clawseccheck · fixtures/b334_nearmiss_documented_helper/skills/site-builder/SKILL.md · Build, lint, and preview the static site; explain build failures.

gl0di/clawseccheck · fixtures/bad_b100_clickfix_ip_fetch/skills/quick-tool/SKILL.md · A quick productivity tool whose Setup section fetches an installer from a bare public-IP host, with no…

gl0di/clawseccheck · fixtures/bad_b100_clickfix_setup/skills/quick-tool/SKILL.md · A quick productivity tool with a Prerequisites section that instructs pasting a remote-fetch command into a terminal.

gl0di/clawseccheck · fixtures/bad_b102_boundary_payload/skills/split-skill/SKILL.md · Ships two data files whose base64 content only decodes to a shell/download payload when joined across their file…

gl0di/clawseccheck · fixtures/bad_b103_ftp/skills/mediatool/SKILL.md · A small media processing helper for local files.

gl0di/clawseccheck · fixtures/bad_b103_http_download/skills/mediatool/SKILL.md · A small media processing helper for local files.

gl0di/clawseccheck · fixtures/bad_b103_ip_host/skills/mediatool/SKILL.md · A small media processing helper for local files.

gl0di/clawseccheck · fixtures/bad_b103_known_ioc_host/skills/mediatool/SKILL.md · A small media processing helper for local files.

gl0di/clawseccheck · fixtures/bad_b103_onion/skills/mediatool/SKILL.md · A small media processing helper for local files.

gl0di/clawseccheck · fixtures/bad_b104_offboarding/skills/dupe-v1/SKILL.md · a helper.

gl0di/clawseccheck · fixtures/bad_b104_offboarding/skills/dupe-v2/SKILL.md · a helper.

gl0di/clawseccheck · fixtures/bad_b104_offboarding/skills/solo/SKILL.md · a helper.

gl0di/clawseccheck · fixtures/bad_b105_cross_skill_combined/skills/report-builder/SKILL.md · Assembles the weekly account report from local usage data.

gl0di/clawseccheck · fixtures/bad_b105_cross_skill_combined/skills/style-guide/SKILL.md · House writing-style conventions for agent responses.

gl0di/clawseccheck · fixtures/bad_b13_ast05_blockquote/skills/meeting-notes/SKILL.md · Summarise meeting notes into actions.

gl0di/clawseccheck · fixtures/bad_b13_ast05_bullet/skills/style-helper/SKILL.md · Apply the house writing style to drafts.

gl0di/clawseccheck · fixtures/bad_b13_ast05_list_item/skills/research-brief/SKILL.md · Prepare a research brief for the user.

gl0di/clawseccheck · fixtures/bad_b13_ast05_sentence_split/skills/ticket-triage/SKILL.md · Triage inbound support tickets.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table/skills/table-runner/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_cell_split/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_decoy_before_real_table/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_escaped_pipe_plain/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_governance_bypass_code_span_pipe/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_header_delim_mismatch/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_pipe_in_code_span_is_boundary/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_real_row_shape/skills/retrieval-helper/SKILL.md · Reviews code against best practices, biasing toward retrieval over pre-trained knowledge.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_same_cell/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_table_short_delimiter/skills/retrieval-helper/SKILL.md · Helper skill.

gl0di/clawseccheck · fixtures/bad_b13_ast05_url_own_line/skills/code-reviewer/SKILL.md · Review diffs against house rules.

gl0di/clawseccheck · fixtures/bad_b13_config_write_target_no_backup_marker/skills/config-hijacker/SKILL.md · Keeps your assistant configuration synced automatically.

gl0di/clawseccheck · fixtures/bad_b13_env_overwrite_name_indirection/skills/s/SKILL.md · Assigns a provider-shaped token to a local name, then writes that name into os.environ — B-910 one-hop indirection…

gl0di/clawseccheck · fixtures/bad_b13_env_overwrite_name_indirection_test_fixture_file/skills/s/SKILL.md · The exact bad_b13_env_overwrite_name_indirection shape, in a file whose basename matches the test-fixture pattern…

gl0di/clawseccheck · fixtures/bad_b13_env_secret_indirect_call_via_variable/skills/s/SKILL.md · A tests/conftest.py that writes a mock provider-shaped key into os.environ, then reaches it through a variable bound to…

gl0di/clawseccheck · fixtures/bad_b13_env_secret_reflective_exec/skills/s/SKILL.md · A tests/conftest.py that writes a mock provider-shaped key into os.environ (with no other use of it at all) but reaches…

gl0di/clawseccheck · fixtures/bad_b13_env_secret_subprocess_present/skills/s/SKILL.md · A tests/conftest.py that writes a mock provider-shaped key into os.environ (with no other use of it at all) but also…

gl0di/clawseccheck · fixtures/bad_b13_env_update_dict_literal_secret/skills/s/SKILL.md · Writes a hardcoded provider-shaped token into os.environ via os.environ.update({...})'s dict-literal value — B-999…

gl0di/clawseccheck · fixtures/bad_b13_env_update_keyword_secret/skills/s/SKILL.md · Writes a hardcoded provider-shaped token into os.environ via os.environ.update(...)'s keyword-argument form — B-999…

gl0di/clawseccheck · fixtures/bad_b13_env_write_secret_conftest_with_exfil/skills/s/SKILL.md · The C-135 adversarial-review repro against B-998 — a tests/conftest.py that writes a mock provider-shaped key into…

gl0di/clawseccheck · fixtures/bad_b13_env_write_secret_non_fixture/skills/s/SKILL.md · The identical env-write-secret shape as clean_b13_env_write_secret_conftest, but in a non-test-fixture file…

gl0di/clawseccheck · fixtures/bad_b13_fetch_to_exec/skills/bootstrap-helper/SKILL.md · Initialise advanced runtime features for the workspace.

gl0di/clawseccheck · fixtures/bad_b13_hardcoded_env_overwrite/skills/s/SKILL.md · Overwrites os.environ with a hardcoded provider-shaped token — B-140 fires.

gl0di/clawseccheck · fixtures/bad_b13_hardcoded_fake_embedded_no_delimiter/skills/s/SKILL.md · Hardcodes a provider-shaped token that merely contains "fake" mid-token — B-140 still fires.

gl0di/clawseccheck · fixtures/bad_b13_hardcoded_getenv_default/skills/s/SKILL.md · Hardcodes a provider-shaped token as the os.getenv default arg — B-140 fires.

gl0di/clawseccheck · fixtures/bad_b13_hardcoded_plain_assignment/skills/s/SKILL.md · Assigns a hardcoded provider-shaped token to a module-level constant — B-740 fires.

gl0di/clawseccheck · fixtures/bad_b13_hardcoded_secret_assign_warns/skills/s/SKILL.md · Hardcodes a live provider-shaped key in a deploy script (non-test file) — B-893 WARN.

gl0di/clawseccheck · fixtures/bad_b13_hardcoded_sk_test_prefix/skills/s/SKILL.md · Hardcodes a sk_test_-prefixed token — B-140 still fires, deliberately unchanged by B-997.

gl0di/clawseccheck · fixtures/bad_b13_hijack_defensive_chrome/skills/owner-loyalty/SKILL.md · Configures the assistant to prioritise the workspace owner.

gl0di/clawseccheck · fixtures/bad_b13_k8s_token_exfil_attacker_host/skills/k8s-ops/SKILL.md · Manage Kubernetes pods and deployments from within the cluster using the mounted service-account credentials for…

gl0di/clawseccheck · fixtures/bad_b13_live_instruction/skills/installer/SKILL.md · A skill that issues a live pipe-to-shell command as an actual instruction.