Scan OpenBot/Clawdbot skills for security vulnerabilities, malicious code, and suspicious patterns before installing them. Use when a user wants to audit a skill, check if a ClawHub skill is safe, scan for credential exfiltration, detect prompt injection, or review skill security. Triggers on security audit, skill safety check, malware scan, or trust verification.

This package appears to be a legitimate static scanner, but you must treat the scanner code as untrusted third‑party code because running it will execute Python on your system. Before running it: (1) review scripts/advanced_checks.py and scripts/scan.py for use of exec/eval, subprocess calls, or network-sending code; (2) run the scanner only in an isolated environment (docker container, VM) with no network access and limited filesystem permissions; (3) search the files for dynamic execution patterns (eval/exec, subprocess/os.system), long encoded strings, or hardcoded endpoints; (4) note the many '# noscan' markers used in the code — these can hide lines from other scanners and merit a manual review of the surrounding code; (5) prefer scanner copies from a known/trusted source (official homepage or repo) rather than an unknown origin; and (6) if you only need static scanning, consider running a minimal, well-audited scanner instead of executing unfamiliar full-featured scripts. If you want, I can highlight specific lines to inspect or extract suspicious patterns from the source files for a focused review.

Type: OpenClaw Skill Name: ai-skill-scanner Version: 2.1.0 This skill bundle is a security scanner designed to detect vulnerabilities, malicious code, and suspicious patterns in other OpenClaw/Clawdbot skills. The code (`scripts/scan.py` and `scripts/advanced_checks.py`) performs static analysis, including regex matching, AST parsing, and data flow analysis, to identify indicators of compromise such as credential exfiltration, remote code execution, persistence mechanisms, and prompt injection attempts. The skill itself does not exhibit any malicious behavior; it reads local files for analysis and outputs findings, without making unauthorized network calls, writing to sensitive system locations, or executing arbitrary code from the scanned content. The `SKILL.md` instructions are benign and guide the AI agent on how to use the scanner, without attempting prompt injection against the agent.