Skill Guard

Skill Security Scanner - Scan for risks before download/use. Use when: installing unknown skills, evaluating third-party code, or security auditing. / Skill安...

This appears to be a straightforward local static scanner that looks for suspicious tokens in files. Before using: (1) note that the SKILL.md and code are slightly out of sync (inspect_remote is documented but not implemented); (2) run the scanner only on the directories you intend — it will read file contents in the path you give it (don’t point it at your entire home or root unless you want those files examined); (3) expect false positives and false negatives — this is a heuristic pattern matcher, not a full taint-analysis engine; (4) because it’s local and includes no networking, it won’t exfiltrate data by itself, but always review the scanner’s source yourself if you plan to rely on its results. If you want remote inspection functionality, ask the author for an updated implementation or documentation.

Type: OpenClaw Skill Name: skill-guard-waai Version: 1.3.0 The skill is a security scanner designed to audit other skills for potential risks by performing keyword-based static analysis. The implementation in `skill_guard.py` searches for dangerous patterns like code execution, file deletion, and credential leaks within local files, but it does not execute the code it scans or perform any unauthorized network or file operations itself. No evidence of malicious intent, data exfiltration, or prompt injection was found.