← 返回 Skills 市场

Axiomata Guard Scanner

Name: Axiomata Guard Scanner
Author: kofna3369

作者 Kofna3369 · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ✓ 安全检测通过

107

总下载

当前安装

版本数

在 OpenClaw 中安装

/install axiomata-guard-scanner

功能描述

Axiomata Guard Scanner — Universal security scanner for any OpenClaw skill. Use when: (1) scanning a skill for security threats before installation, (2) chec...

使用说明 (SKILL.md)

Axiomata Guard Scanner

Universal OpenClaw skill security scanner Impersonal — works for any agent

Description

Axiomata Guard Scanner protects OpenClaw agents by scanning skills for security threats. It uses multiple "vaccines" (detection engines) to identify malicious patterns before installation.

Trigger: Before installing any skill, especially from ClawHub.

Security Layers

Layer 1: ClawHub Malicious Pattern Check (VAX-001)

Checks for known malicious patterns:
- Malicious binary downloads (openclawcli.zip)
- RCE via glot.io snippets
- Malware via GitHub releases
- Password-protected archives

Layer 2: C2 & Data Exfiltration Detection (VAX-027)

Detects command & control infrastructure:
- Suspicious DNS lookups
- Discord/Telegram webhooks
- Bit.ly / short URL redirects
- Exfiltration patterns

Layer 3: Cross-Vector Attack Chain (VAX-028)

Correlates findings from other vaccines:
- Multiple attack vectors
- Chain escalation patterns
- Combined threat assessment

Layer 4: Rootkit & Bootkit Detection (VAX-029)

Detects kernel-level threats:
- System manipulation patterns
- Driver injection
- UEFI threats

Layer 5: Package Ecosystem Attacks (VAX-030)

Detects package-level attacks:
- typosquatting
- dependency confusion
- malicious packages

Usage

Scan a skill file

python3 scripts/guard_scanner.py --file \x3Cskill-path>

Scan skill code directly

python3 scripts/guard_scanner.py --code "\x3Cskill code>"

JSON output

python3 scripts/guard_scanner.py --file \x3Cskill-path> --json

Output Format

{
  "scanner": "Axiomata Guard Scanner",
  "version": "1.0.0",
  "skill_name": "...",
  "global_threat_level": "CLEAN | LOW | MEDIUM | HIGH | CRITICAL",
  "global_score": 0-300,
  "decision": "APPROVE | WARN | NEUTRALIZE | ISOLATE",
  "triggered_vaccines": [...],
  "summary": {...}
}

Threat Levels

Level	Score	Action
CLEAN	0	APPROVE
LOW	1-19	APPROVE with monitoring
MEDIUM	20-49	WARN — manual review
HIGH	50-79	NEUTRALIZE
CRITICAL	80+	ISOLATE immediately

In Altum Per Security. Axiomata Guard Scanner v1.0.0

安全使用建议

This skill looks reasonable to use as a local heuristic scanner, but only run it on files you intend to inspect and do not treat CLEAN or APPROVE as a complete security guarantee. Use it alongside manual review or other security checks before installing unknown skills.

功能分析

Type: OpenClaw Skill Name: axiomata-guard-scanner Version: 1.0.1 Axiomata Guard Scanner is a security utility designed to perform static analysis on OpenClaw skills to detect potential threats. The script `scripts/guard_scanner.py` implements several regex-based detection engines (vaccines) to identify indicators of compromise such as C2 communication, data exfiltration patterns, and rootkit-related system calls. The tool operates locally on provided input and shows no evidence of malicious intent, data exfiltration, or unauthorized execution.

能力评估

ℹ Purpose & Capability

The purpose and implementation are coherent for a security-pattern scanner, but the broad 'universal' and 'APPROVE' style wording could be over-trusted.

ℹ Instruction Scope

The skill instructs users to run a bundled Python scanner against a selected skill file or pasted code; this is purpose-aligned and user-directed.

ℹ Install Mechanism

There is no install spec and no required binaries declared, although the usage instructions require running python3.

✓ Credentials

No credentials, environment variables, network calls, broad indexing, or persistent data stores are requested in the provided artifacts.

✓ Persistence & Privilege

The artifacts show no background service, persistence mechanism, privilege escalation, credential/session access, or automatic mutation behavior.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install axiomata-guard-scanner
安装完成后，直接呼叫该 Skill 的名称或使用 /axiomata-guard-scanner 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

v1.0.1 - Added to clawhub-publish-workflow as bundled scanner

v1.0.0

v1.0.0 - Universal security scanner for OpenClaw skills, 5 vaccines, 100% impersonal, ISO 100%

元数据

Slug axiomata-guard-scanner

版本 1.0.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题