Skill Audit by Raini

Scans installed or remote OpenClaw skills for security risks like credential leaks and suspicious code to prevent supply chain attacks.

This appears to be a legitimate local security scanner. Before installing: 1) Note SKILL.md mentions a 'check' command that the bundled CLI does not implement — treat that as a documentation mismatch. 2) The scanner uses simple regex heuristics and will produce false positives (and could miss sophisticated obfuscation); review flagged files manually. 3) When running 'scan --all' the tool will read all files in your skills directory — run it in a safe environment or with explicit paths if you're concerned about sensitive locations. 4) Because the skill can be invoked autonomously by the agent, consider whether you want it enabled for automatic runs; this is not a red flag by itself but be mindful of what paths the agent may instruct the skill to scan. 5) If you rely on its results for critical decisions, open the bundled src/audit.js and verify the detection rules and allowlist domains yourself (the code is short and readable).

Type: OpenClaw Skill Name: raini-skill-audit Version: 1.0.0 This skill is a security scanner designed to detect malicious patterns in other OpenClaw skills. The `SKILL.md` clearly outlines its purpose and the types of risks it identifies (e.g., credential reading, data exfiltration, dynamic code execution). The `src/audit.js` file implements this scanner by using regular expressions to analyze the content of other skill files. While it performs file system access (`fs.readdirSync`, `fs.readFileSync`), this is strictly for reading the code of target skills, which is necessary for its stated security auditing function. There is no evidence of prompt injection, data exfiltration, or malicious execution by this skill itself; rather, it identifies these behaviors in *other* skills.