SkillGuard Scanner

Security scanner for OpenClaw/ClawHub skills. Detects malware, reverse shells, credential theft, prompt injection, memory poisoning, typosquatting, and suspicious prerequisites before installation. Use when installing new skills, auditing existing skills, checking a skill name for typosquatting, or scanning ClawHub skills for security risks.

This skill appears to do what it advertises, but treat any security tool as you would any code: (1) Inspect scripts/scanner.py yourself before running (it's included in the bundle). (2) Run it in a restricted environment or with least privilege (do not run as root/administrator). (3) Be aware --fetch-clawhub will use network access and an external 'clawhub' CLI; verify that CLI before using. (4) Review flagged results manually — scanners have false positives and may flag benign tooling. (5) If you plan to automate or allow autonomous invocation, consider the same sandboxing and review controls to limit blast radius.

Type: OpenClaw Skill Name: skillguard-scanner Version: 1.1.0 The OpenClaw SkillGuard scanner is a security tool designed to detect malicious patterns, such as reverse shells, obfuscation, credential theft, and data exfiltration, in other OpenClaw skills. Analysis of `scripts/scanner.py` confirms that it identifies these patterns using regex but does not execute them itself. The only external command executed is `clawhub search`, which is benign and safely invoked. The `SKILL.md` and `references/threat-landscape.md` files describe the scanner's purpose and provide examples of threats it detects, without containing any malicious prompt injections or executable code for the agent. All observed behaviors are consistent with a legitimate security scanning utility.