skill scan and detect risk

OpenClaw扩展安全管理系统。扫描已安装扩展的安全风险，提供allowlist策略控制，在使用高风险扩展前进行风险提示。适用于安全管理、风险评估、权限控制场景。

This skill appears to implement a legitimate local scanner, but there are two things to check before installing: 1) Inspect and control the hook: hook/shield-scan.js runs a local Python startup script and appends its output to the agent's system prompt. That behavior can change agent behavior broadly (prompt injection). If you install, either remove or disable the hook, or ensure the referenced startup script is present, simple, and cannot be modified by untrusted parties. 2) Fix the inconsistency: SKILL.md claims hook/auto-check is 'planned', but a hook file exists and it references scripts/tui-startup.py which is missing. Ask the author why the hook is present and what the startup script should do. If you can't verify the startup script's content, do not enable the hook. Other precautions: review config.json allowlist entries (ensure you trust the listed skills), run the scanner in a sandbox first, and limit write permissions to ~/.openclaw/workspace/skills so attackers cannot replace the startup script or other scanner files. If you need a short recommendation: keep the scanner code (scripts/shield.py) but remove/disable the JS hook until its behavior is audited.

Type: OpenClaw Skill Name: skill-shield-007 Version: 1.0.0 Skill Shield is a security utility designed to scan OpenClaw extensions for risky patterns such as command execution, network calls, and credential access. The core logic in `scripts/shield.py` performs local static analysis via keyword matching, while `hook/shield-scan.js` integrates scanning into the session startup. Although the tool requires broad read access to the extensions directory and modifies the system prompt to display alerts, its operations are transparent, documented, and lack any indicators of data exfiltration, obfuscation, or malicious intent.