← Back to Skills Marketplace
126
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install clawshield-lite
Description
Scans AI skills for potential security risks and unsafe commands
README (SKILL.md)
ClawShield Lite
A lightweight security analysis skill that scans AI skill code for risky patterns and outputs a structured risk report.
How It Works
- Accepts code input via
stdin(string or file content) - Loads pattern definitions from
rules.json - Scans the input for dangerous and suspicious patterns
- Assigns a risk level:
SAFE,MEDIUM RISK, orHIGH RISK - Outputs a JSON report with all findings
Usage
echo "import os; os.system('rm -rf /')" | python main.py
Usage Guidance
This skill appears coherent and low-risk: it statically scans text from stdin against local patterns. Before installing, consider that pattern-based scanners have limitations — they can produce false positives and false negatives (they may miss obfuscated or novel malicious code). Review and, if needed, expand rules.json to cover patterns important to you. Because the skill's source and homepage are unknown, prefer running it in a sandbox or CI job first, manually inspect rules.json and main.py yourself, and do not rely solely on this tool for security decisions; combine it with AST-based analysis and manual review for higher assurance.
Capability Analysis
Type: OpenClaw Skill
Name: clawshield-lite
Version: 1.0.0
ClawShield Lite is a straightforward static analysis tool designed to scan code for risky patterns using simple string matching. The implementation in main.py is transparent, relies solely on the Python standard library, and does not execute the code it analyzes or perform any unauthorized network or file system operations. The skill's behavior aligns perfectly with its stated purpose in SKILL.md and README.md.
Capability Assessment
Purpose & Capability
The name/description (static security scanner) matches the included files (main.py, rules.json, README, SKILL.md). No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
SKILL.md and main.py instruct the agent to read code from stdin and scan it against rules.json. The runtime only reads rules.json from the same package and does not reference other system paths, environment variables, or external endpoints.
Install Mechanism
There is no install spec and the tool uses only the Python standard library. No downloads, extract steps, or third‑party packages are required.
Credentials
The skill requests no environment variables, credentials, or config paths. All required inputs are provided via stdin and the local rules.json file.
Persistence & Privilege
Flags show the skill is not forced-always and does not modify agent/system configuration. It runs on-demand and does not persist credentials or change other skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install clawshield-lite - After installation, invoke the skill by name or use
/clawshield-lite - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of ClawShield Lite.
- Added static code scanning
- Detects dangerous and suspicious patterns
- Provides risk scoring (SAFE, MEDIUM, HIGH)
- Outputs structured JSON security reports
Metadata
Frequently Asked Questions
What is ClawShield Lite – AI Skill Security Scanner?
Scans AI skills for potential security risks and unsafe commands. It is an AI Agent Skill for Claude Code / OpenClaw, with 126 downloads so far.
How do I install ClawShield Lite – AI Skill Security Scanner?
Run "/install clawshield-lite" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is ClawShield Lite – AI Skill Security Scanner free?
Yes, ClawShield Lite – AI Skill Security Scanner is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does ClawShield Lite – AI Skill Security Scanner support?
ClawShield Lite – AI Skill Security Scanner is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created ClawShield Lite – AI Skill Security Scanner?
It is built and maintained by TheNox21 (@thenox21); the current version is v1.0.0.
More Skills