Security Audit Report
Score: 75/100
nanobanana-ppt-skills
Caution
by itrocker · 26 files · 4/30/2026, 2:07:49 PM
🔭 Continuously monitored by ClawSecure Watchtower
Findings
- Critical: 0
- High: 2
- Medium: 1
- Low: 0
- Info: 0
Source: https://clawhub.ai/itrocker/nanobanana-ppt-skills
SHA-256: b4fbb559cdba...
nanobanana-ppt-skills is an Other skill for the OpenClaw ecosystem, created by itrocker. ClawSecure audited this skill through our 3-Layer Audit Protocol covering all 10 OWASP ASI Top 10 categories. This skill received a security score of 75/100, indicating moderate risk areas that should be addressed. The audit identified 3 findings across the scan's three security layers.
What does a score of 75 mean?
A security score of 75/100 places this skill in the Medium Risk range. Skills in this range have identifiable security concerns that may need remediation before production use. Review the findings below and consider the specific recommendations provided. ClawSecure calculates scores using a weighted deduction model: critical findings deduct 20 points, high-severity findings deduct 10, medium-severity 5, and low-severity 2. A perfect score of 100 means no findings were detected across all three audit layers.
3-Layer Audit Protocol
🛡 ClawSecure Proprietary Engine
- Findings:
- Missing config.json - agent may not be properly configured
- Potentially dangerous code pattern detected: base64.*decode
CRITICAL
3 findings
🔒 Advanced Static & Behavioral Analysis
- Issues detected: No issues detected
- Findings: 0
PASS
0 findings
📦 Supply Chain Security
- Issues detected: No issues detected
- Findings: 0
PASS
0 findings
🔭 Get notified when this skill's code changes — enter your email for free Watchtower alerts.
HIGH
- 2 findings
- F-001 Potentially dangerous code pattern detected: base64.*decode ASI05 OWASP ASI: Unexpected Code Execution
- File: kling_api.py
- F-002 Potentially dangerous code pattern detected: base64.*decode ASI05 OWASP ASI: Unexpected Code Execution
- File: transition_prompt_generator.py
MEDIUM
- 1 finding
- F-001 Missing config.json - agent may not be properly configured ASI03 OWASP ASI: Identity & Privilege Abuse
- Detected by: Proprietary. Category: config.
OWASP ASI Framework Coverage
- ASI01 Agent Goal Hijack
- ASI02 Tool Misuse
- ASI03 Identity & Privilege
- ASI04 Agentic Supply Chain
- ASI05 Unexpected Code Execution
- ASI06 Memory & Context
- ASI07 Insecure Inter-Agent Communication
- ASI08 Cascading Failures
- ASI09 Human-Agent Trust Exploitation
- ASI10 Rogue Agents
Categories highlighted were detected in this scan. ClawSecure provides comprehensive coverage across all 10 OWASP ASI Top 10 categories.
Context-Aware Analysis
This skill requests system-level capabilities which are standard for OpenClaw automation skills. Generic scanners often flag these capabilities as suspicious regardless of context. ClawSecure's Context-Aware Intelligence analyzes capabilities in ecosystem context — we differentiate real threats (malicious code, unauthorized data exfiltration, supply chain vulnerabilities, ReDoS patterns) from normal agent functionality. Our 3-Layer Audit Protocol is purpose-built for the OpenClaw ecosystem.
Findings are tagged with OWASP ASI (Agentic Security Initiative) Top 10 category references where applicable. ClawSecure provides comprehensive coverage across all 10 OWASP ASI categories. Learn more at owasp.org
Security Recommendations for nanobanana-ppt-skills
- Pin npm dependencies to exact versions.
- Add a config.json permissions manifest.