← 返回 Skills 市场
6659
总下载
2
收藏
0
当前安装
17
版本数
在 OpenClaw 中安装
/install guard-scanner
功能描述
Security scanner and runtime guard for OpenClaw skills, MCP servers, and AI agent workflows. Detects prompt injection, identity hijacking, memory poisoning,...
安全使用建议
Review or fix the ClawHub audit command-injection issue before using this with untrusted input. Treat the malicious fixture files as hazardous test samples and do not execute them directly. Also verify a built package before installation because this source artifact did not include the compiled plugin and launcher files referenced by package metadata.
能力评估
Credentials
src/asset-auditor.ts runs execSync with a shell-interpolated ClawHub query from the CLI, making command execution possible if untrusted query text reaches guard-scanner audit clawhub.
Install Mechanism
package.json has no normal install lifecycle script and its files list excludes tests, but the inspected source artifact is missing referenced build outputs and launcher files such as dist/openclaw-plugin.mjs and guard-scanner, so the install surface is not fully verifiable from this artifact.
Instruction Scope
The root skill instructions describe user-invoked scanning, audit, MCP, and runtime guard workflows; the prompt-injection and credential-theft text appears in malicious test fixtures, not in the root runtime instructions.
Persistence & Privilege
Long-running watch/patrol modes, MCP async task files, and audit logs under ~/.openclaw/guard-scanner are disclosed and purpose-aligned; I did not find hidden cron, service, or backdoor persistence in the runtime path.
Purpose & Capability
The stated purpose, root SKILL.md, MCP tools, runtime hook, and scanner implementation are broadly coherent for a security scanning and runtime guard package.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install guard-scanner - 安装完成后，直接呼叫该 Skill 的名称或使用
/guard-scanner触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v16.0.2
Improve ClawHub listing copy for search/discovery, align metadata with v16.0.2 metrics, and keep SKILL/package/plugin versions in sync.
v16.0.1
v16.0.1: 5-layer analysis pipeline, OWASP ASI compliance, 358 patterns, 35 categories, 27 runtime checks
v15.0.0
v15.0.0: 358 patterns, 35 categories, 27 runtime checks, 332 E2E tests. Unicode confusable, Base64 scan, ContextCrush gate.
v13.0.1
Fix SKILL.md frontmatter for OpenClaw compatibility. Add Finding Schema. 306 tests passing. SSOT aligned.
v5.0.8
v5.0.8
v5.0.7
v5.0.7: Improved ClawHub search visibility. Keyword-enriched description for scanner/security/skill queries. Updated stats: 150 patterns, 139 tests, 5 CVEs covered.
v5.0.6
v5.0.6: CVE-2026-2256 (MS-Agent check_safe bypass, CERT VU#431821) + CVE-2026-25046 (Kimi execSync injection). 150 patterns, 139 tests.
v5.0.5
v5.0.5: 147 patterns (23 categories), 136 tests, CVE-2026-25905/27825, VDB Injection, QuarantineNode, OSS cleanup
v5.0.4
v5.0.4: Stealth-encoded signatures to avoid static scanner false positives. 134/134 tests. Logarithmic decay for duplicate findings.
v5.0.3
v5.0.3: Added openclaw.hooks field for npm hook pack distribution — users can now run 'openclaw hooks install guard-scanner' directly
v5.0.2
v5.0.2: Added handler.ts for OpenClaw hooks compatibility — fixes openclaw hooks install
v5.0.1
v5.0.1: Pure OSS release — removed all proprietary references, 135 static + 26 runtime patterns, 22 categories, zero dependencies
v4.0.2
guard-scanner 4.0.2 introduces major upgrades with expanded runtime protection and improved performance.
- Added full runtime blocking of dangerous tool calls via OpenClaw plugin hook (26 patterns, 5 layers, 0.016ms/scan)
- Runtime Guard enforcement modes (`monitor`, `enforce`, `strict`) are now fully functional (blocking supported)
- Increased pattern library: 135 static + 26 runtime patterns, covering 22 threat categories
- Expanded and clarified documentation; now includes clear requirements for `--soul-lock` identity protection
- Test suite greatly extended to 134 tests across 24 suites
- No network access or dependencies; scanning remains fully local and deterministic
v2.1.0
guard-scanner 2.1.0
- Enhanced documentation and onboarding: added detailed OpenClaw integration/limitations, step-by-step start, and clarified runtime mode status.
- New task lists, docs, and sample fixture skills added for maintainers.
- Updated test coverage to include new fixture examples of leaky/PII risks.
- Improved terminology: now explicitly identifies current runtime guard as "warn-only" until OpenClaw `cancel` API lands.
- Documentation now clearly reflects that no network or model calls occur, and local-only audit logging remains unchanged.
v2.0.1
docs: README updated for v2.0.0 — Security Gaps section, test counts, roadmap
v2.0.0
feat: Plugin Hook runtime guard with actual blocking. 3 modes: monitor/enforce/strict. 35 new tests.
v1.0.0
🛡️ Initial release: 170+ threat patterns, 17 categories, Runtime Guard hook, SARIF/HTML/JSON output, Plugin API. Zero dependencies.
元数据
常见问题
Guard Scanner 是什么？
Security scanner and runtime guard for OpenClaw skills, MCP servers, and AI agent workflows. Detects prompt injection, identity hijacking, memory poisoning,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 6659 次。
如何安装 Guard Scanner？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install guard-scanner」即可一键安装，无需额外配置。
Guard Scanner 是免费的吗？
是的，Guard Scanner 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Guard Scanner 支持哪些平台？
Guard Scanner 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Guard Scanner？
由 dee-guava（@koatora20）开发并维护，当前版本 v16.0.2。
推荐 Skills