Skill Install Guardian

Security and due diligence layer for installing external skills from ClawHub. Performs DEEP content scanning for malicious patterns, security checks, integra...

This skill appears to do what it says (scan skills before install) and does not request extra credentials or install components, but it has some implementation weaknesses you should consider before relying on it as your only defense: 1) The file-list parsing and the way script file paths are fetched are brittle and may miss files in subdirectories — review and test the scanner on representative skills to confirm coverage. 2) It depends on the trustworthiness and behavior of the local `npx clawhub` CLI; ensure that binary is the official/expected one and that its `--files` and `--file` outputs match what the script expects. 3) Expect false positives and false negatives; always manually review CRITICAL flags. 4) Run the script in an isolated environment (or CI sandbox) the first few times to observe its behavior and outputs. If you plan to rely on it operationally, request or implement fixes to (a) fetch files using their full reported paths rather than basenames, (b) make file-list parsing robust to different CLI output formats, and (c) add explicit logging and an audit trail of scans and owner decisions.

Type: OpenClaw Skill Name: skill-install-guardian Version: 1.3.0 The OpenClaw skill 'skill-install-guardian' is designed to perform security and due diligence checks on other skills before installation. Both its documentation (SKILL.md) and its Python script (scripts/check.py) consistently reflect this security-focused purpose. The script implements robust slug validation and uses safe, list-based `subprocess.run` calls to prevent shell injection when interacting with `npx clawhub`. It actively scans other skill files for dangerous patterns (like `eval()`, `exec()`, API keys, and obfuscation) and reports findings. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection attempts within this skill itself; rather, it aims to detect such issues in *other* skills.