← 返回 Skills 市场

SkillGuard - OWASP ASI Agent安全扫描器

Name: SkillGuard - OWASP ASI Agent安全扫描器
Author: thebuddha5566

作者 thebuddha5566 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install skillguard-asi

功能描述

Agent技能安全扫描器 — 上传Skill包自动检测安全漏洞（prompt注入/凭证泄露/代码执行/依赖审计等8维检测）。三平台首发，零依赖Python标准库。

使用说明 (SKILL.md)

SkillGuard — Agent技能安全扫描器

让Agent安装Skill前先做安全检查。 覆盖OWASP ASI Top 10，8大检测器。

快速开始

python cli.py scan my-skill.zip           # 全量扫描
python cli.py scan my-skill.zip --format md  # Markdown报告
python cli.py list                        # 列出检测器

8大检测器

检测器	OWASP ASI	检测内容
prompt_injection	ASI-01,04	Prompt注入/越狱/中文话术
secret_exposure	ASI-02	API Key/Token/密码泄露
code_execution	ASI-03	eval/exec/subprocess危险调用
dependency_audit	ASI-06	依赖包安全审计
permission_analysis	ASI-05	权限声明vs实际行为交叉验证
sensitive_file_access	ASI-08	敏感文件+数据外泄
network_whitelist	ASI-07	URL白名单网络请求审计
memory_pollution	ASI-09,10	记忆投毒/认知攻击

TRACE五维安全评分

输出Trust(信任)/Reliability(可靠)/Authenticity(真实)/Compliance(合规)/Exposure(暴露)安全评分。

许可证

MIT — 免费使用、修改、分发。

安全使用建议

Install only if you want a local command-line scanner for skill packages. It appears benign, but run it on untrusted archives in a constrained workspace or sandbox because it extracts and reads ZIP contents during scanning, and note that the marketplace capability tags overstate credential-related needs compared with the code.

能力标签

cryptorequires-walletrequires-oauth-tokenrequires-sensitive-credentials

能力评估

✓ Purpose & Capability

The artifacts match the stated purpose: a Python standard-library CLI that extracts a user-supplied skill ZIP, scans text/Python files for security patterns, and emits JSON or Markdown reports.

✓ Instruction Scope

Runtime instructions are limited to user-invoked commands such as scan and list; there are no prompt overrides, hidden agent-control instructions, or automatic execution hooks.

ℹ Install Mechanism

The package declares zero external dependencies and has no installer script, though metadata capability tags mention wallet/OAuth/sensitive credentials despite the artifacts not requesting or using those capabilities.

ℹ Credentials

Local file reads, temporary ZIP extraction, and optional report writes are expected for a scanner, but users should treat untrusted ZIPs cautiously because the extractor has no explicit archive size or file-count limits.

✓ Persistence & Privilege

No background service, startup modification, credential storage, broad indexing, privilege escalation, or durable persistence was found; output files are written only when the user supplies an output path.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install skillguard-asi
安装完成后，直接呼叫该 Skill 的名称或使用 /skillguard-asi 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

首发：8检测器×OWASP ASI Top 10全覆盖。TRACE五维评分。零依赖Python标准库。

元数据

Slug skillguard-asi

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题