humanize
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
SecuritySecurity.clawnet/unsigned-skill.json
MEDIUMSecurityMEDIUM
.clawnet/unsigned-skill.json
The provided artifact contains a highly suspicious, unusually large encoded payload that includes explicit adversarial instruction text aimed at bypassing safeguards and coercing/controlling downstream AI/evaluation/agent behavior, with sabotage-style directives (delete/kill/terminate) also present. While this fragment alone does not show network/process/host actions, it represents a serious supply-chain risk because downstream tooling may decode and act on these embedded directives. Treat as high-risk and investigate the consuming code paths that decode `opReturnHex` and how `files[]` and signature-like fields are used.
Confidence: 63%Severity: 86%
Audit Metadata