skll-scan

Security scanning tool for OpenClaw Skills. Detects malicious code patterns, extracts domains, and checks threat intelligence APIs. Use when: installing new...

This skill appears to do what it says: local static scanning and domain checks. Before installing or using it: (1) review the script source yourself (it ships with code) to ensure it meets your policies; (2) avoid hardcoding API keys in the script—use a protected config (~/.skill-scan/config.json) with tight file permissions; (3) be careful enabling external threat-intel lookups for internal/private domains (you may leak sensitive hostnames to external services); (4) the cron example edits /etc/cron.d and /var/log, which requires elevated privileges—only set up system cron jobs if you understand the implications; (5) consider running initial scans in an isolated environment and verifying outputs before integrating into CI. Overall the package is coherent and low-risk if used with the normal precautions above.

Type: OpenClaw Skill Name: skll-scan Version: 1.0.0 The 'skill-scan' bundle is a legitimate security utility designed to perform static analysis and threat intelligence lookups on other OpenClaw skills. The core logic in 'scripts/skill-scan.py' uses regex patterns to identify potentially dangerous code (e.g., exec, filesystem access) and extracts domains to check against blacklists or APIs like Abuse.ch. No evidence of data exfiltration, malicious execution, or prompt injection was found; the tool's behavior aligns perfectly with its documented purpose of auditing skill safety.