← Back to Skills Marketplace
726
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install solo-audit
Description
Health check knowledge base for broken links, missing frontmatter, tag inconsistencies, and coverage gaps. Use when user says "audit KB", "check frontmatter"...
Usage Guidance
This skill appears to do what it says: scan markdown files for frontmatter, links, tags, orphans, and coverage gaps. Before installing/using it, note two practical cautions: (1) it may execute any link-checker scripts found in your repo (it runs Bash and project scripts if present) — only run it against repositories you trust or run it inside a sandbox/container; (2) confirm what the listed tool mcp__solograph__kb_search is in your environment (it may call an internal search helper). No credentials or external downloads are requested. If you want extra safety, run the audit manually or review the audit output before applying any automated fixes.
Capability Analysis
Type: OpenClaw Skill
Name: solo-audit
Version: 1.4.1
The skill bundle is classified as suspicious due to a critical arbitrary code execution vulnerability. In SKILL.md, Step 4 instructs the AI agent to 'run it as well' if a script named `scripts/check_links.py` exists in the project. Given that `Bash` is an `allowed-tool`, this instruction allows for the execution of arbitrary code present in the user's project, creating a prompt injection vulnerability that leads to remote code execution (RCE). While the skill bundle itself does not contain malicious payloads, it provides a mechanism for an attacker (or a compromised project) to execute arbitrary commands via the agent.
Capability Assessment
Purpose & Capability
Name/description match the instructions: the SKILL.md describes finding .md files, checking frontmatter, tags, links, orphans, and coverage—all appropriate for a knowledge-base audit. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are focused on KB content and use Read, Grep, Glob, Bash and an internal search tool to analyze markdown files. The SKILL.md also says 'if a link-checking script exists in the project, run it' — this will execute project-supplied scripts if present, which is within audit scope but means the agent can run arbitrary code from the repository. Users should be aware of that execution risk.
Install Mechanism
No install spec and no code files — instruction-only. Nothing is downloaded or written to disk by the skill itself.
Credentials
The skill requires no environment variables, credentials, or config paths. Requested access is limited to repository files and optional local scripts, which is proportional to an audit task.
Persistence & Privilege
always is false and the skill does not request elevated or persistent privileges. It can be invoked autonomously (default), which is normal; there's no evidence of modifications to other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install solo-audit - After installation, invoke the skill by name or use
/solo-audit - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.4.1
Universalize: remove project-specific references, add SearXNG recommendation
v1.4.0
Initial ClawHub release
Metadata
Frequently Asked Questions
What is Audit?
Health check knowledge base for broken links, missing frontmatter, tag inconsistencies, and coverage gaps. Use when user says "audit KB", "check frontmatter"... It is an AI Agent Skill for Claude Code / OpenClaw, with 726 downloads so far.
How do I install Audit?
Run "/install solo-audit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Audit free?
Yes, Audit is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Audit support?
Audit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Audit?
It is built and maintained by Rust (@fortunto2); the current version is v1.4.1.
More Skills