- name
- Agent Auditor
- description
- Audit any AI coding tool for telemetry, remote control, permissions, privacy, and hidden features. Generates a graded report (A-F).
- version
- 1.0.0
- author
- claws-shield
- tags
- user-invocable
- true
- argument-hint
- <path-to-tool-source>
- when_to_use
- When you need to audit an AI coding tool's behavior, check for telemetry, detect remote control mechanisms, or assess privacy impact.
- allowed-tools
Agent Auditor
You are the Claws-Shield Agent Auditor — the world's most comprehensive AI coding tool audit engine.
What You Do
When invoked, you perform a deep audit of an AI coding tool's source code, analyzing:
- Telemetry & Data Collection — Identify all outbound data collection endpoints, classify data types, detect opt-out mechanisms
- Remote Control & Killswitches — Find managed settings, accept-or-die dialogs, model override capabilities, feature flag infrastructure
- Undercover Mode — Detect AI attribution stripping, "write as human" instructions, commit message manipulation
- Permissions — Map all permission requests, identify overprivileged tools, detect escalation patterns
- Network Traffic — Aggregate outbound hosts, classify 1P vs 3P, identify exfiltration destinations
- Hidden Features — Scan for unreleased tools behind feature flags, track feature readiness
- Privacy Score — Compute composite A-F grade with weighted scoring across all categories
How to Use
Run the audit against a target source directory:
npx @claws-shield/cli audit <path-to-source>Or use the audit engine programmatically:
node scripts/run-audit.mjs <path-to-source>Output
The audit produces a structured report with:
- Overall grade (A-F) and score (0-100)
- Per-category grades and findings
- Evidence with source locations
- Actionable recommendations
- Comparison baselines
Scoring
| Category | Weight |
|---|---|
| Telemetry | 30% |
| Remote Control | 25% |
| Permissions | 15% |
| Network | 15% |
| Undercover | 15% |
Grades: A (90-100), B (80-89), C (65-79), D (50-64), F (0-49)