Publish Skill

Security audit tool for AI agent skills. Scans skill packages for malware, credential theft, and suspicious patterns before installation. Defensive security...

This skill purports to be a defensive scanner but asks you to fetch and run a prebuilt binary from external URLs whose checksums are published only inside the same SKILL.md (and the referenced download version differs from the registry version). Before using/instantiating this skill: 1) Prefer obtaining the binary from a verified, authoritative release page (or build from source yourself) and independently verify checksums from the project repository; 2) Do not provide an --upload-url to unknown endpoints (that option could send scanned contents elsewhere); 3) Ask the publisher for a signed release or reproducible build instructions (the doc claims source is on Gitee—verify the repo and tags); 4) If you cannot independently verify the binary or source, treat this skill as untrusted and avoid running the downloaded executable. I have medium confidence in this assessment because there are clear inconsistencies (version mismatch, external binary) but no direct evidence of malicious intent in the instruction text.

Type: OpenClaw Skill Name: skillscan-wrapper Version: 0.4.1 The skill acts as a wrapper for an external binary (skillscan-wrapper) hosted on Gitee, which is a high-risk pattern for AI agents. While it presents as a defensive security tool and provides SHA-256 checksums for integrity, it includes functionality for data exfiltration via an optional `--upload-url` and requires the execution of opaque binaries. The reliance on external artifacts from gitee.com/random_player/cmic-skill-scanner without local source code for the binary itself warrants a suspicious classification.