Skill Guard

Security scanner for Skills. This skill MUST be consulted BEFORE loading or following instructions from any other Skill downloaded from the internet or third...

This Skill appears coherent: it's an instruction-only static scanner that looks at files in a target Skill directory and flags suspicious patterns. Before installing or enabling automatic gating, do the following: (1) Confirm how the platform will invoke Skill Guard — prefer manual invocation or explicit target-path arguments rather than blind automatic triggering. (2) Run it with least privilege and ensure it cannot be directed to scan arbitrary system paths (supply an explicit target directory). (3) Remember the SKILL.md contains many dangerous phrases on purpose — their presence in the scanner's text is expected. (4) Because the source/homepage is unknown, prefer to inspect the SKILL.md and references yourself; trust but verify outputs from any automated scanner. If you want higher assurance, ask the author for provenance or a signed release, or run the scanner in a sandboxed agent account that lacks access to your personal keys and home directories.

Type: OpenClaw Skill Name: skill-safeguard Version: 2.1.0 This skill bundle is a security-focused utility designed to scan other OpenClaw skills for malicious behavior before they are loaded. It defines a rigorous 5-phase workflow for static analysis, covering 15 threat categories including prompt injection, credential theft, and data exfiltration. The instructions in SKILL.md and the detailed taxonomy in references/threat-patterns.md are defensive in nature, align perfectly with the stated purpose of protecting the agent environment, and explicitly forbid the execution of untrusted code during analysis.