Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
- No user-facing changes. - Internal update: modified scripts/scanner.py.
What This Skill Does
Scans OpenClaw skill packages for security vulnerabilities before installation. Detects credential stealers, obfuscated code, data exfiltration, prompt injection in SKILL.md files, and binary tampering. Roughly 22-26% of ClawHub skills have been flagged as containing vulnerabilities.
Manual code review of every third-party skill is impractical; this automates detection of known attack patterns across SKILL.md content, scripts, metadata, and binaries in one pass.
When to use it
- Scanning a ClawHub skill before installing it
- Auditing all currently installed skills at once
- Verifying binary checksums after a skill updates
- Detecting typosquatted skill names mimicking popular ones
- Generating checksum manifests for trusted skill versions
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: scan the skill at ~/.openclaw/skills/some-skill/ before installing
- 1Run scanner.py with --path pointing to the skill directory
- 2Analyze SKILL.md for prompt injection patterns and suspicious URLs
- 3Check scripts for network calls, env variable access, and obfuscated strings
- 4Run typosquatting check against known popular skill names
- 5Output risk level with specific findings and file locations
Risk assessment showing CLEAN/LOW/MEDIUM/HIGH/CRITICAL rating with a list of flagged patterns and the files they were found in