Skill Scan

Security scanner for OpenClaw skill packages. Scans skills for malicious code, evasion techniques, prompt injection, and misaligned behavior BEFORE installation. Use to audit any skill from ClawHub or local directories.

This package appears to be a legitimate, featureful skill-scanner, but there are some red flags you should act on before installing or enabling automatic behavior: 1) Inspect the SKILL.md and AGENTS.md templates for hidden or coercive instructions (look for 'ignore previous instructions' language and any invisible/unicode-control characters). If present, remove or sanitize those lines. 2) Review the included source files (skill_scan/ and test-fixtures/) locally or in a sandbox before running the CLI, especially if you will grant it permission to edit AGENTS.md or run LLM-enabled analysis. The code bundle contains both safe test fixtures and explicit malicious examples used for evaluation — confirming behaviour matters. 3) Be cautious about granting LLM API keys (OPENAI_API_KEY/ANTHROPIC_API_KEY) to the environment unless you trust the skill; LLM layers run arbitrary prompt content against those providers. 4) Prefer manual (on-demand) scanning over automatic installation hooks. If you choose automatic integration, require an explicit review step and backup the current AGENTS.md before allowing modifications. 5) If you accept the skill, run it initially with static analysis only (no --llm) and examine JSON output (--json) to verify the scanner's behavior; only enable alerting channels after testing. If you want, I can: (a) show the exact AGENTS.md templates included so you can inspect them, (b) list files in skill_scan/ that perform code execution or network calls, or (c) produce a sanitized AGENTS.md patch you can apply manually instead of allowing the skill to change it automatically.

Type: OpenClaw Skill Name: skill-scan Version: 1.0.0 The OpenClaw AgentSkills skill bundle 'skill-scan' is a security scanner designed to detect malicious code, evasion techniques, and prompt injection in *other* skill packages. Its code (`scanner.py`, `ast_analyzer.py`, `prompt_analyzer.py`, `llm_analyzer.py`, `rules/dangerous-patterns.json`) implements various detection mechanisms, which inherently involve looking for high-risk patterns. The `SKILL.md` provides instructions for the agent to integrate this scanner into its workflow to *enhance* security, not compromise it. Files containing actual malicious code (e.g., reverse shells, credential exfiltration) are clearly labeled as `test-fixtures` and are used solely for evaluating the scanner's effectiveness, not as part of its operational logic. All observed behaviors are aligned with its stated purpose as a security tool.