Auto Skill Scanner - 自动化AI技能安全监控工具。每日自动扫描已安装的OpenClaw技能，发现硬编码凭证、Shell注入、网络泄露等安全隐患，报告推送至Telegram/飞书等渠道。触发词：scan skills、扫描技能、安全扫描。

Before installing: 1) Review the included Python files yourself (scripts/skill_audit.py and scripts/scan_and_report.py). They perform local static analysis and will read your installed-skill directories and OpenClaw session file (~/.openclaw/agents/.../sessions.json). 2) Understand that after one manual trigger the skill will create daily cron jobs that run the scanner and post reports to all discovered channels — this can expose discovered secrets to shared channels. If you want this behavior, restrict which channels the agent uses or modify the script to require manual approval before posting critical findings. 3) Ensure 'openclaw' CLI and Python3 are available (the code calls openclaw cron add/list), and expect the installer to attempt to create cron entries; the metadata does not declare these requirements. 4) Consider running the scanner in a safe test account or isolated environment first; examine the report output locally (the script prints reports) and verify no sensitive secrets are being forwarded to unintended recipients. 5) If you install, check and audit created cron jobs (openclaw cron list) and verify/report routing; remove or disable automatic posting if you prefer manual triage.

Type: OpenClaw Skill Name: auto-skill-scanner Version: 1.0.4 The skill functions as an automated security scanner but employs high-risk behaviors including programmatic persistence and sensitive data discovery. It reads 'sessions.json' to extract active communication channels and uses 'subprocess.run' to register itself as a recurring 24-hour cron job via the 'openclaw' CLI. While these actions align with the stated goal of automated reporting, the broad access to session configurations and the self-scheduling persistence mechanism are high-privilege operations typical of monitoring tools that could be repurposed for unauthorized data collection. Files involved: scripts/scan_and_report.py and scripts/skill_audit.py.