OpenClaw Skill Scanner

Scans ClawHub skills for malicious patterns like payloads, reverse shells, data leaks, and crypto miners before and after installation.

This package is a local scanner + safe-install wrapper and appears coherent with that purpose. Before installing or using it: 1) Review whitelist.json (it contains local whitelist/blacklist decisions and will block blacklisted slugs). 2) Ensure you trust the openclaw CLI used to download skills (install-hook.sh delegates downloading to that tool). 3) Understand the scanner is regex-based and can produce false positives (it will flag common patterns like subprocess/os.system, long base64 strings, and network calls). 4) Because install-hook.sh copies files into ~/.openclaw/workspace/skills, run it in a sandbox or inspect scan reports before allowing suspicious installs. 5) If you need higher assurance, audit the remainder of scanner.py for any outbound network calls (none were found in the provided fragments) and run scans on known-good samples to calibrate false positive rates.

Type: OpenClaw Skill Name: openclaw-skill-scanner Version: 1.0.0 This skill bundle is a security scanner designed to detect malicious patterns in other OpenClaw skills. The `SKILL.md` clearly outlines its purpose and the types of threats it identifies (e.g., reverse shells, data exfiltration, base64 payloads), without instructing the agent to perform these actions. The `install-hook.sh` script safely downloads skills to a temporary directory using `openclaw hub install` and then invokes `scanner.py` for analysis before installation. The `scanner.py` itself contains the detection logic, including comprehensive regex patterns for various malicious activities, and explicitly avoids flagging its own code. All actions, including file system operations and subprocess calls, are consistent with the legitimate function of a security tool.