write-config — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited write-config (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run .skills/write-config/scripts/write_canonical_config.mjs from the project root. It writes a canonical CLAWBACK.md: every option at its DEFAULT value (generated from the live DEFAULTS in src/config.js, so it never drifts as options change), except the two a LAN bind needs set — host=0.0.0.0 and tls=true (it leaves adminToken as a null placeholder for you to set) — followed by the documentation body in canonical_config_body.md (in this skill's assets/ directory).
# write BOTH ./CLAWBACK.md and the global ~/.config/clawback/CLAWBACK.md:
node .skills/write-config/scripts/write_canonical_config.mjs
# write specific target(s):
node .skills/write-config/scripts/write_canonical_config.mjs ./CLAWBACK.md
# inject a real token instead of the null placeholder:
CLAWBACK_CANONICAL_TOKEN=… node .skills/write-config/scripts/write_canonical_config.mjsThe adminToken fronts live Anthropic credentials, so the script never mints one and never prints a token's value. It resolves ONE shared value in this order and writes it to every target so they agree:
CLAWBACK_CANONICAL_TOKEN from the environment, if set;(a null / empty / placeholder token does NOT count — it is overwritten);
null — a placeholder you must fill in.With host: 0.0.0.0, the proxy refuses to bind until adminToken is set, so a forgotten placeholder fails loud instead of exposing a guessable secret. Output reports only presence, length, and origin — never a token's value.
./CLAWBACK.md and${XDG_CONFIG_HOME:-$HOME/.config}/clawback/CLAWBACK.md.
0600 (owner-only; it holds a secret), enforced even whenthe file already existed.
Confirm the result parsed and merged with the verify-config skill.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.