← Back to Skills Marketplace
3763
Downloads
4
Stars
33
Active Installs
1
Versions
Install in OpenClaw
/install skill-audit
Description
Audit locally installed agent skills for security/policy issues using the SkillLens CLI (`skilllens scan`, `skilllens config`). Use when asked to scan a skills directory (Codex/Claude) and produce a risk-focused audit report based on each skill's `SKILL.md` and bundled resources.
Usage Guidance
Before installing, verify that the SkillLens package is the one you intend to trust, prefer one-off or pinned use over global installation, scan a specific skills directory instead of broad configured roots, and use optional auditor CLIs only for content you are comfortable sharing with those tools.
Capability Analysis
Type: OpenClaw Skill
Name: skill-audit
Version: 1.0.0
This skill is designed to audit other agent skills for security and policy issues using the `skilllens` CLI tool. The `SKILL.md` provides clear, security-focused instructions for the AI agent on how to install and use `skilllens scan`, and explicitly details what types of risks (exfiltration, execution, persistence, prompt injection) the agent should look for in *other* skills. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection against the agent within this skill's own definition. The instructions are aligned with its stated purpose as a security auditing tool.
Capability Assessment
Purpose & Capability
The artifact coherently describes a security audit workflow for locally installed agent skills using SkillLens, and its commands and review checklist match that purpose.
Instruction Scope
The instructions prefer a concrete scan path, require manual review of skill contents, and explicitly say not to execute bundled scripts by default.
Install Mechanism
The skill recommends `npx skilllens scan`, `pnpm dlx skilllens scan`, or a global `pnpm add -g skilllens`; this is purpose-aligned but depends on an external package and is not version-pinned.
Credentials
Reading local skill directories is expected for an audit tool, but users should keep scan scope specific and understand that optional Claude/Codex auditor modes may process scanned content.
Persistence & Privilege
No automatic persistence or privileged modification is present; the only persistent behavior is the user-directed option to globally install the SkillLens CLI.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-audit - After installation, invoke the skill by name or use
/skill-audit - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the skills-audit tool using SkillLens.
- Audits locally installed agent skills for security and policy issues via the SkillLens CLI.
- Provides clear workflow for scanning skills directories, reviewing risks, and generating risk-focused audit reports.
- Details risk patterns to watch for, such as exfiltration, shell execution, persistence, and prompt injection.
- Includes practical command usages and guidance for both quick scans and in-depth manual reviews.
- Offers report structure suggestions for actionable, evidence-based audit results.
Metadata
Frequently Asked Questions
What is SkillLens Audit?
Audit locally installed agent skills for security/policy issues using the SkillLens CLI (`skilllens scan`, `skilllens config`). Use when asked to scan a skills directory (Codex/Claude) and produce a risk-focused audit report based on each skill's `SKILL.md` and bundled resources. It is an AI Agent Skill for Claude Code / OpenClaw, with 3763 downloads so far.
How do I install SkillLens Audit?
Run "/install skill-audit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is SkillLens Audit free?
Yes, SkillLens Audit is completely free (open-source). You can download, install and use it at no cost.
Which platforms does SkillLens Audit support?
SkillLens Audit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created SkillLens Audit?
It is built and maintained by morozRed (@morozred); the current version is v1.0.0.
More Skills