java-dependency-security-scan分析 Java、Maven 或 Spring 项目依赖漏洞，验证版本受影响情况，检查传递和内嵌依赖，并生成安全修复建议报告。
Install via ClawdBot CLI:
clawdbot install qiushuizy/java-dependency-security-scanGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://api.osv.dev/v1/queryCalls external URL not in known-safe list
https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanisAI Analysis
The skill's external API calls (OSV.dev, Maven documentation) are consistent with its stated purpose of dependency vulnerability analysis and do not appear to send sensitive user data. The signals indicate standard, documented security research behavior, not credential harvesting or hidden malicious instructions.
Audited Apr 17, 2026 · audit v1.0
Usage Guide
Loading usage data… refresh in a few seconds.
Scored Apr 19, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...