skills-firewall

Security firewall for skills that automatically blocks and filters malicious or potentially harmful skills. Use when: (1) Scanning skills for security threat...

This package appears to implement exactly what it claims (a local skills scanner/firewall), but review the code before trusting it on important data. Recommended steps before using or installing: 1) Inspect and run the scripts in a sandbox or unprivileged environment (do not point them at system root or directories with secrets). 2) Test on known-good and intentionally-malicious sample skills to verify decisions and to see whether scan_skill and firewall_check agree. 3) Pay attention to the ActionType handling and decision outputs — the enum/value handling looks buggy and could cause misclassification or no action. 4) Consider hardening rules to avoid blocking useful legitimate code (the rules are conservative and substring-based in places, causing false positives). 5) If you will run this in automation, ensure the quarantine behavior and export/import config paths are safe for your environment. If you are not comfortable auditing the Python code, treat this as untrusted and do not run it on sensitive directories.

Type: OpenClaw Skill Name: skills-firewall Version: 1.0.0 This skill bundle implements a 'Skills Firewall' designed to scan, detect, and report on security threats within other OpenClaw skills. The code (`scripts/scan_skill.py`, `scripts/firewall_check.py`, `scripts/generate_report.py`) performs legitimate security analysis operations such as reading skill files, applying regular expression patterns to detect known malicious constructs (e.g., `eval()`, `os.system()`, hardcoded secrets, `curl`/`wget`), and generating reports. The `SKILL.md` documentation accurately describes the tool's purpose and provides instructions for its use, without any evidence of prompt injection attempts against the AI agent. All file operations and data processing are consistent with the stated goal of a security scanner, and there are no indicators of intentional harmful behavior, data exfiltration, persistence, or unauthorized actions by this skill itself.