Skill Security Auditor Jack

Audit third-party or custom skills for permission risk, unsafe commands, and integration safety. Use before: installing a new skill, enabling external script...

This skill is instruction-only and coherent with its purpose: it defines checks and an output schema but does not itself perform installs or request secrets. Keep in mind: (1) its effectiveness depends on accurate inputs — it will not automatically fetch or verify remote code unless the agent supplies that data; (2) treat its audit as advisory, not authoritative — for high-risk skills follow up with manual code review; (3) when adopting untrusted skills, prefer sandboxed execution or manual review even if the auditor reports low risk. If you want stronger guarantees, run this auditor alongside actual inspections of the install artifacts and source repository rather than relying solely on its textual analysis.

Type: OpenClaw Skill Name: skill-security-auditor-jack Version: 1.0.0 The skill is a security auditing tool designed to evaluate other skills for risks such as unsafe commands, over-privilege, and suspicious installation steps. The instructions in SKILL.md provide a structured framework for identifying potential threats (e.g., eval, curl|bash, sensitive file access) and recommending mitigation strategies, aligning perfectly with its stated purpose without any malicious or suspicious indicators.