cyberlensScan websites, GitHub repositories, and Claw Hub skills for practical security issues using a local quick website scan and CyberLens cloud analysis when conn...
Install via ClawdBot CLI:
clawdbot install shadoprizm/cyberlensGrade Good — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://cyberlensai.comAI Analysis
The skill's external API calls (cyberlensai.com) are directly related to its stated purpose of security scanning and account authentication. While it requires storing an API key and sending scan targets to an external service, this is disclosed functionality, not hidden credential harvesting. The 'UNSAFE_SHELL' signal appears to be a false positive from a code example, not an active exploit.
Audited Apr 17, 2026 · audit v1.0
Generated May 23, 2026
Before launching a new website or web application, development teams use CyberLens to scan for missing security headers, HTTPS misconfigurations, exposed technologies, and insecure forms. The scan provides a security score and remediation advice, ensuring the site meets security best practices before going live. This helps prevent data breaches and builds user trust.
Organizations that rely on open source libraries can scan GitHub repositories for dependency vulnerabilities, secret leaks, and malicious code before integrating them into their projects. CyberLens provides a security score and detailed findings, enabling informed decisions about which packages to trust. This reduces supply chain security risks.
Before installing a skill from Claw Hub, users can scan the skill package for security issues including malicious code, dependency vulnerabilities, and secret leaks. CyberLens analyzes the package locally and returns a safety score and grade, allowing users to avoid potentially harmful skills. This is crucial for maintaining a secure AI agent ecosystem.
Small and medium-sized businesses without dedicated security teams can regularly scan their websites and public repositories using CyberLens. The tool's plain-English remediation advice helps non-experts understand and fix vulnerabilities. With the free tier offering 5 scans per month, it provides affordable ongoing security monitoring.
New developers can use CyberLens to scan sample projects or personal websites to learn about common security issues. The AI-powered analysis and grade (A-F) provide immediate feedback and educational value. This helps instill security-conscious development practices from the start.
CyberLens offers a free tier with 5 scans per month (3 website + 2 repository) to attract individual developers and small teams. Paid plans provide higher scan limits, deeper analysis, and priority support. Revenue is generated through monthly subscriptions for additional scans and premium features.
CyberLens can be integrated into enterprise CI/CD pipelines as a security gate, scanning code and websites before deployment. Enterprise customers pay for bulk scan credits, dedicated support, and on-premise deployment options. This model targets organizations with compliance requirements and high-volume scanning needs.
By scanning Claw Hub skills before installation, CyberLens acts as a trust verification service for the AI agent marketplace. The company could partner with Claw Hub to offer verified badges for scanned skills, with revenue from skill publishers who pay for certification or from transaction fees on scans initiated through the marketplace.
💬 Integration Tip
For CI/CD integration, use the scan_target tool with cloud mode enabled and parse the returned JSON to enforce a security score threshold before deployment. You can set CYBERLENS_API_KEY as a build environment variable to avoid interactive authentication.
Scored May 23, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.
Analyze and classify agent skills for safety using local evaluation. Optionally produce a signed attestation of the vetting result.
Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.
Audit codebases and infrastructure for security issues. Use when scanning dependencies for vulnerabilities, detecting hardcoded secrets, checking OWASP top 10 issues, verifying SSL/TLS, auditing file permissions, or reviewing code for injection and auth flaws.
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.