Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
**Adds risk-class contradiction detection to scope expansion analysis.** - Introduces detection of mismatches between a skill’s self-declared risk category and its actual capability footprint. - Updated capability list to include `risk-class-contradiction-detection`. - Documentation now describes how risk-class contradiction is used as an additional security signal. - No functional changes beyond enhanced reporting and analysis.
What This Skill Does
Tracks capability scope expansion across skill versions by computing cumulative permission drift, not just adjacent-version deltas. Detects the slow-drift pattern where each individual update is defensible but the total change from initial to current represents significant attack surface growth. Also checks whether a skill's self-declared risk classification is consistent with its actual capability footprint.
Point-in-time permission scanners miss gradual scope creep; this tool computes cumulative drift across the full version history, catching exfiltration-capable capability combinations that no single version review would flag.
When to use it
- Auditing a third-party skill before upgrading to its latest version
- Finding which installed skills have drifted furthest from their original capability declarations
- Flagging skills whose risk classification contradicts their actual permission set
- Reviewing a skill's full version history after a security incident
- Checking whether changelog entries accurately disclosed each permission expansion
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: trace capability scope evolution for report-generator v1.0 through v1.5
- 1Retrieve per-version capability declarations for the specified skill across the version range
- 2Compute permission delta for each version transition
- 3Calculate cumulative scope expansion from initial to current version
- 4Analyze step-size pattern across transitions for regularity anomalies
- 5Identify capability composition amplification points where new emergent capabilities first appear together
Scope expansion report with per-version deltas, cumulative drift summary, step-size pattern analysis, changelog completeness flags, and a final verdict: STABLE, DRIFT, INCREMENTAL-EXPANSION, or SCOPE-CAPTURE