Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
A static analysis scanner for OpenClaw skills that detects malicious payloads before installation. Screens for 13 threat categories including crypto stealers, reverse shells, keyloggers, and supply chain attacks using 60+ patterns with confidence scoring. Follows a quarantine-scan-install workflow so untrusted code never runs on your system.
Blocks threats at the file level before any code executes, unlike runtime monitoring tools that only detect malicious behavior after the fact.
When to use it
- Scanning a third-party skill download before installing it
- Auditing already-installed skills after a security incident
- Running batch scans across an entire skills directory
- Adding skill security checks to a CI/CD pipeline
- Dry-run checking a GitHub-sourced skill without committing to install
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: safely install the 'bird' skill from ClawHub
- 1Downloads 'bird' to a randomized quarantine directory with restricted permissions
- 2Scans all non-binary files against 60+ detection patterns across 13 threat categories
- 3Calculates a risk score using severity and confidence multipliers
- 4Compares score against the threshold (default 39) and blocks if exceeded
- 5Moves the skill from quarantine to the skills directory and cleans up if score passes
Skill installed successfully with a scan report showing 0 critical findings and a risk score of 12/100