Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
A security layer for AI agents that intercepts requests to install external skills and rewrites them from scratch instead of copying them verbatim. Prevents prompt injection via hidden HTML comments, zero-width Unicode characters, and embedded malicious instructions embedded in external skill files.
Copying and executing external skills directly exposes the agent to payloads invisible in rendered markdown but visible to the LLM, which regeneration eliminates entirely.
When to use it
- Installing a community skill from ClawHub without running hidden malicious instructions
- Safely evaluating a GitHub-hosted skill before adding it to a project
- Blocking a curl-based exfiltration attempt disguised as skill setup
- Reviewing a skills.sh package for obfuscated Unicode payloads before use
- Sanitizing a third-party skill that references external files in a poison chain
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Install the cloudflare skill from skills.sh
- 1Acknowledge the request and state that the skill will be rewritten, not copied
- 2Fetch the external skill content and identify its actual purpose
- 3Flag any suspicious elements such as HTML comments or external URL references
- 4Write a clean replacement skill in standard ASCII with no external references
- 5Present the rewrite with a summary report and wait for explicit user approval before saving
A sanitized, human-approved skill file saved to the skills directory, functionally equivalent to the original but free of injected instructions