Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Auto-audit on install, audit.sh helper script, certification badges
What This Skill Does
Audits agent skill code for security threats before installation. Reads the full skill source, sends it to the SkillGuard API, and returns a verdict from SAFE to DANGEROUS with a numeric risk score. Supports paid audits ($0.05 USDC via x402) and a free credit option using a signed EIP-712 IOU.
Automated pre-install auditing catches threats like credential stealers that manual code review or community trust alone would miss.
When to use it
- Checking a clawhub skill for credential stealers before installing
- Blocking installation of a skill flagged as DANGEROUS
- Scanning skill code for malware as part of an automated install workflow
- Verifying a skill's certification badge by its hash
- Assessing an agent's reputation by wallet address
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: audit this skill before installing it
- 1Reads the target skill's SKILL.md and all files under scripts/
- 2Concatenates all code into a single string
- 3Calls the SkillGuard API with the skill name and concatenated code
- 4Receives a verdict and numeric risk score (0-100)
- 5Blocks installation and reports threat details if verdict is CAUTION or DANGEROUS
Verdict SAFE (score 0) — installation proceeds, or DANGEROUS (score 73) — installation blocked with listed threat details
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.