auto-reply

clawhub:auto-reply

View source
C
67/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

2

Score

67/100

CRITICAL 1
MEDIUM 1

Findings (2)

CRITICAL
Jailbreak template
L84

Detects common jailbreak prompt patterns

DAN mode
FIX

Remove directives that attempt to exfiltrate data through the agent's response (e.g., asking the agent to embed credentials in URLs or include secret values in output).

FP?

Likely FP if the text is a legitimate tool instruction about displaying configuration to the user (e.g., show current settings) without external transmission.

MEDIUM
Dynamic code evaluation
L86

Detects eval() or exec() used for dynamic code execution

eval("
FIX

Replace eval()/exec() with a safer alternative such as json.loads(), ast.literal_eval(), or a purpose-built parser.

FP?

Likely FP if the matched text contains 'exec' as part of a word (e.g., 'execute', 'execution') rather than an actual eval() or exec() call.