Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Added security policy engine: human-readable WHY/ACTION blurbs per finding, real-world incident references, enriched JSON output
What This Skill Does
SkillGuard scans OpenClaw skills for security threats including reverse shells, credential theft, memory poisoning, and typosquatting. It works on installed skills, individual skill files, or ClawHub skills fetched before installation. There is no official skill vetting process for OpenClaw, and documented campaigns have distributed malware through the ecosystem.
It catches specific attack patterns documented in real ClawHub malware campaigns, including the ClawHavoc vector of embedding download instructions in skill prerequisites, which generic scanners miss.
When to use it
- Scan all installed skills before a system audit
- Check a ClawHub skill for malware before installing it
- Verify a skill name isn't typosquatting a known skill
- Review flagged patterns in a skill someone else wrote
- Automated security check in a skill review workflow
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: scan the 'git-helper' skill from ClawHub before I install it
- 1Run scanner with --fetch-clawhub git-helper to pull the skill from ClawHub
- 2Scanner fetches all skill files and checks each against threat pattern library
- 3Detects any reverse shell commands, suspicious URLs, or credential access patterns
- 4Assigns risk score and false positive likelihood to each finding
- 5Saves full JSON report to data/scan_results.json
Console summary showing risk level (e.g., MEDIUM score 14, one flag for subprocess use with high FP likelihood), plus full JSON report for manual review
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.