Skill Sandbox

Sandboxed ClawHub skill installation with automated security scanning. Use when: (1) Installing any new skill from ClawHub, (2) Auditing an already-installed...

This skill appears to implement a staging-and-scan workflow, but several mismatches mean you should be cautious before using it as your safety guard: 1) It is not a true sandbox — the script runs 'clawhub install', which will perform network installs and may execute target skill install/postinstall hooks on your host. Run this in an isolated VM/container if you want protection. 2) The SKILL.md claims 'no network calls' and 'no external dependencies', which is false: ensure the host has and trusts 'clawhub', 'jq', and standard Unix tools the script uses. 3) The script offers a '--force' flag that bypasses VirusTotal checks—avoid using --force unless you fully trust the publisher. 4) The skill does not declare required binaries or environment variables (e.g., jq, file, clawhub, OPENCLAW_WORKSPACE), so inventory and install those dependencies manually in a safe environment. 5) Prefer running with '--scan-only' first and reviewing the staged files manually (or with an LLM-auditor) before promoting. If you lack a safe sandbox, do not run this on production hosts; instead run it inside an ephemeral VM or container and verify behavior and outputs before trusting automatic promotion.

Type: OpenClaw Skill Name: skill-sandbox Version: 1.0.0 The skill-sandbox bundle is a security utility designed to audit and sandbox other OpenClaw skills before installation. The primary script, scripts/skill-sandbox.sh, implements a multi-layered static analysis pipeline that checks for dangerous code patterns (eval, shell execution), sensitive data access (env vars, keys), and risky instructions in SKILL.md. While the script performs file system operations like directory deletion and movement, these actions are strictly aligned with its stated purpose of managing a staging and quarantine workflow to prevent supply chain attacks.