Skillguard

Audit OpenClaw skills for security risks before installation via SkillGuard API.

This tool does what it says: it fetches skill source (or reads a local file) and sends the full contents to https://api.agentsouls.io for analysis. Before using it, consider: (1) Do you trust the SkillGuard operator? The audit will transmit full source code (including any accidentally committed secrets) to that external service. The SKILL.md claims the code is analyzed in memory and not stored — you must trust that claim. (2) Inspect audit.sh and safe-install.sh yourself (they are included and readable) so you know exactly what will be sent and when clawhub is invoked. (3) Use the provided self‑hosting option or manual review if you cannot expose code externally. (4) Be cautious with the --force flag in safe-install.sh (it bypasses the audit). If these privacy/trust tradeoffs are acceptable, the skill is coherent and appropriate for the stated purpose.

Type: OpenClaw Skill Name: skillguard-audit Version: 1.1.0 The skill's primary function is to send the full source code of other OpenClaw skills to a remote third-party API (api.agentsouls.io) for analysis. While this behavior is explicitly disclosed in the SKILL.md privacy notice, the automated exfiltration of local or downloaded script content via audit.sh and safe-install.sh poses a significant security risk, as it could lead to the exposure of sensitive logic or hardcoded credentials contained within the audited files to an external service.