Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Security scanner that audits OpenClaw skills for malicious code, prompt injection, supply chain attacks, hardcoded secrets, and data exfiltration. Uses a point-based scoring system with three risk levels and maintains SHA-256 file baselines to detect tampering between scans. Runs entirely on Python 3 stdlib with no external dependencies.
Generic code scanners don't understand the OpenClaw skill format or prompt injection patterns, while SkillGuard includes an 80+ domain allowlist and context-aware scoring that cuts false positives for skills making legitimate API calls.
When to use it
- Auditing all installed skills before running them on a new machine
- Checking a newly downloaded skill from ClawHub before trusting it
- Running scheduled cron alerts when a skill's files change unexpectedly
- Detecting hardcoded AWS or GitHub tokens inside third-party skills
- Identifying typosquatted package names in skill dependencies
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: scan all my installed skills and write a report
- 1Run skillguard.py scan against ~/clawd/skills/
- 2Compute SHA-256 baselines for each skill's files on first run
- 3Score each skill based on detected patterns, domain analysis, and sensitive file access
- 4Flag any skills that exceed thresholds or trigger automatic MALICIOUS conditions
- 5Write a markdown report with risk levels and per-finding recommendations
Markdown report listing each skill as CLEAN, SUSPICIOUS, or MALICIOUS with one-line recommendations for every finding