skill-audit

Security scanner for OpenClaw skills. Analyzes skill folders and .skill files for: prompt injection, data exfiltration, malicious scripts, suspicious network...

This skill appears to be a legitimate static scanner bundled with a Python script, but exercise caution before using it as an automated pre-install hook. Actions to take before installing/auto-running: (1) Manually inspect scripts/scan_skill.py for any code that makes network calls, forks processes, or executes scanned files — confirm it only reads files and writes local JSON. (2) Confirm the SKILL.md prompt-injection flag is harmless (e.g., example text) and not an attempt to influence other automated tools. (3) If you intend to allow automated deletion on 'critical' findings, verify the code constructs the deletion path safely and that you will be prompted for explicit confirmation; never allow blind rm -rf operations. (4) Prefer to run the scanner in an isolated environment (container or sandbox) the first time and cross-check results with an independent tool. (5) If provenance matters, verify the GitHub repository and publisher identity before trusting the skill widely.

Type: OpenClaw Skill Name: openclaw-skill-audit Version: 1.0.2 The skill is a legitimate security auditing tool designed to perform static analysis on other OpenClaw skill bundles. The Python script (scripts/scan_skill.py) implements a comprehensive scanner using regex and AST analysis to detect prompt injection, data exfiltration patterns, and dangerous code execution (e.g., eval, exec, subprocess). The instructions in SKILL.md are defensive, directing the AI agent to act as a security gatekeeper during the installation of new skills. No malicious intent, hidden exfiltration, or unauthorized access patterns were found.