← 返回 Skills 市场
Skill Guard Pro
作者
Chloe Park
· GitHub ↗
· v1.0.1
· MIT-0
349
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install skill-guard-pro
功能描述
Security scanner for ClawHub skills. Analyze before you install.
安全使用建议
This skill appears to do exactly what it says: static analysis of ClawHub skills. Before installing, ensure you have the 'uv' runner and the 'clawhub' CLI from a trusted source, because the scanner will invoke the clawhub CLI to download third‑party skills into a temp directory for analysis. The scanner does not execute downloaded code, it only inspects it. Review the scanner's code if you want additional assurance (the repo is small and readable). If you rely on automated scanning for security decisions, remember static analysis has limits — follow the tool's own advice to manually review any CAUTION/DANGEROUS findings.
功能分析
Type: OpenClaw Skill
Name: skill-guard-pro
Version: 1.0.1
ClawGuard Pro is a security utility designed to perform static analysis on other OpenClaw skills. It uses regex-based pattern matching and Python AST parsing (in lib/analyzer.py and lib/patterns.py) to detect risks like shell injection, credential theft, and data exfiltration. While the skill performs high-privilege actions such as reading local files and executing the 'clawhub' CLI to download packages (in lib/downloader.py), these behaviors are transparently documented and strictly aligned with its stated purpose as a security scanner.
能力评估
Purpose & Capability
Name/description (security scanner) match the included files: analyzer, patterns, reporter, downloader, and a scan CLI. The declared required binary ('uv') is used by the README/SKILL.md examples and the project expects 'uv run' to execute the provided script. Nothing in the code requires unrelated cloud credentials or unrelated binaries.
Instruction Scope
SKILL.md instructs the agent to run the included scanner (uv run scripts/scan.py) and to optionally download skills via the clawhub CLI. The scanner performs static analysis only (regex/AST) and does not execute downloaded code. This is appropriate for the stated purpose, but the downloader will fetch arbitrary third-party skill code into a temp directory for analysis — you should ensure the clawhub CLI you use is trusted and understand that downloaded code is untrusted input to be inspected, not executed.
Install Mechanism
No install script is provided (instruction-only install examples). The repository contains Python code intended to be run directly. There are no opaque remote downloads or extracted archives performed by the skill itself. The only external tool invoked programmatically is the clawhub CLI (via subprocess), which is necessary to retrieve remote skills and is consistent with purpose.
Credentials
The skill declares no required environment variables or credentials and the code does not read secrets from the runtime environment. Pattern definitions look for credential-related patterns in target code (e.g., os.getenv in scanned files) but that is detection logic, not use of the host's secrets. No disproportionate credential access is requested.
Persistence & Privilege
Flags show always:false and default invocation behavior. The skill does not attempt to modify other skills or global agent configuration. It downloads files to a temporary directory and has cleanup logic to remove them; no persistent privileged presence is requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-guard-pro - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-guard-pro触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Remove test samples with malicious patterns to pass ClawHub security scan
v1.0.0
Initial release: ClawHub skill security scanner. Detect malicious patterns, credential theft, data exfiltration before installing.
元数据
常见问题
Skill Guard Pro 是什么？
Security scanner for ClawHub skills. Analyze before you install. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 349 次。
如何安装 Skill Guard Pro？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-guard-pro」即可一键安装，无需额外配置。
Skill Guard Pro 是免费的吗？
是的，Skill Guard Pro 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Skill Guard Pro 支持哪些平台？
Skill Guard Pro 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Guard Pro？
由 Chloe Park（@chloepark85）开发并维护，当前版本 v1.0.1。
推荐 Skills