Pre-installation Security Check

Pre-installation security assessment for ClawHub skills. Run before any skill install.

This skill appears to implement a reasonable pre-install security workflow, but there are unresolved inconsistencies you should address before trusting it: 1) The README references CLI wrapper/setup scripts to enforce checks, but those scripts are not included — ask the author why and request the wrapper code if you expect CLI-level enforcement. 2) Because the skill can spawn sub-agents and run 'openclaw skill install' inside them, confirm how your agent platform sandboxes sub-agents and whether those sub-agents truly isolate network, credentials, and persistent storage. 3) Review the upstream GitHub repo (the skill will fetch metadata) yourself before approving any automatic install; verify stars, recent commits, and look for the missing scripts. 4) Prefer to run the first few checks manually or in a tightly controlled environment (throwaway account or VM) until you confirm the tool's behavior. If you plan to allow autonomous invocation, require higher trust (e.g., verified org, included wrapper code, or an explicit manual review) before giving it free rein.

Type: OpenClaw Skill Name: preinstall-security-check Version: 1.0.1 This skill functions as a security shim that intercepts 'install' commands to perform risk scoring and sandbox analysis. While the stated intent is protective, it exhibits high-risk behavior by spawning sub-agents to execute third-party code during analysis and referencing missing CLI enforcement scripts (scripts/setup-cli-enforcement.sh) designed to intercept terminal commands. The sandbox procedure in references/sandbox-procedure.md requires installing the target skill to analyze it, which could lead to unintended execution if the platform's sub-agent isolation is bypassed.