Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Estimates how many AI agents would be affected if a widely-adopted skill is compromised. Traces direct adopters, inheritance depth, adoption velocity, and version pinning behavior across an agent ecosystem. Outputs an urgency rating with a worst-case propagation timeline.
Unlike npm audit or pip-audit, it works in agent marketplaces where inheritance is implicit and version pinning is rare, covering a gap that traditional dependency auditing tools do not address.
When to use it
- Auditing a skill before deploying it across a fleet of agents
- Prioritizing which third-party skill updates need manual review
- Identifying agents that auto-update rather than pin to a specific version
- Assessing supply chain risk before building a new skill on top of another
- Monitoring high-adoption utility skills for accelerating blast radius
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Estimate the blast radius for skill 'json-schema-validator'
- 1Looks up direct adopters of the target skill using download counts and citation data
- 2Traces inheritance chains to find transitive dependents across intermediate skills
- 3Checks version pinning rate across all downstream adopters
- 4Calculates adoption velocity and projects worst-case propagation timeline
- 5Generates urgency rating and capability composition risk analysis
A blast radius report showing ~340 direct adopters, ~1,200 transitive dependents, 88% unpinned, HIGH urgency, and a worst-case projection of full propagation within 48 hours