Safe Skill Advisor

Security Skill Advisor - Protect you from malicious skills on ClawHub. Provides security warnings, tool recommendations, and 30-second self-check checklist.

This skill is advice-only and coherent with its purpose, but follow these precautions before acting on its recommendations: 1) Verify any external tools it recommends (visit the linked GitHub repos directly, check stars/commits and maintainer identity) before running pip install; 2) Never run curl | bash or execute unfamiliar downloaded archives — the skill itself warns against that; 3) Run third-party scanners in a sandbox or VM if possible to reduce risk; 4) Confirm the reporting email ([email protected]) is the legitimate ClawHub contact before sending sensitive evidence; 5) Remember this skill only gives guidance — actual risk comes from installing/running other tools or skills it recommends, so inspect those separately.

Type: OpenClaw Skill Name: safe-skill-advisor Version: 1.7.0 The skill is a purely informational security advisor designed to educate users about potential risks on ClawHub. It contains no executable code and functions by providing the AI agent with structured instructions (SKILL.md) to deliver security warnings, checklists, and recommendations for third-party tools like 'Cisco AI Skill Scanner' and 'SecureClaw'. While it uses forceful prompt engineering ('MANDATORY INSTRUCTIONS') to define the agent's behavior, the intent is clearly aligned with its stated defensive purpose and lacks any indicators of malicious activity, data exfiltration, or unauthorized system access.