ai-labs-builder

clawhub:ai-labs-builder

View source

100/100

First Seen

Feb 20, 2026

Last Scanned

Feb 22, 2026

Findings

Score

100/100

LOW 1

Findings (1)

LOW

Unscoped Bash tool in allowed tools INDIRECT_010

command-execution L18

Detects skills that include unscoped Bash in their allowed tools list (not Bash(cmd:*) scoped)

allowed-tools:
  - Read
  - Write
  - Edit
  - Bash

FIX

Scope the Bash tool to specific commands using allowedTools patterns (e.g., Bash(git *) instead of bare Bash). Remove blanket Bash access from allowed_tools lists.

FP?

Likely FP if the Bash entry in allowed_tools is part of a constrained configuration that limits commands elsewhere (e.g., via system prompt restrictions).