Security Audit (Sona)

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or installing.

This skill appears to be what it says: a conservative, fail-closed repo/skill auditor that runs trufflehog, semgrep, and a custom Python scanner. Before installing or running it: 1) Run it on a quarantined copy of the repository (do not point it at / or sensitive live directories). 2) Inspect and, if needed, edit scripts/security_audit.sh which contains hard-coded paths (/home/virta/...) so it doesn't scan unintended locations. 3) Expect pipx to be installed into your user environment (~/.local/bin); run_audit_json.sh prepends that path. 4) Confirm you want a fail-closed workflow: the tool treats missing manifest/lockfiles/persistence signals as FAIL by design. 5) If you need offline/no-network guarantees, ensure trufflehog/semgrep are run with update checks disabled (the repo notes this) and review semgrep/trufflehog versions before trusting results. 6) If you are uncertain, run the scripts manually on a copy and review the produced JSON before integrating into automated install/promotion flows.

Type: OpenClaw Skill Name: sona-security-audit Version: 0.1.3 This skill is a security auditing tool designed to detect malicious behavior, including prompt injection, data exfiltration, persistence, and supply chain vulnerabilities. The `hostile_audit.py` script explicitly scans for these patterns using regular expressions. The `openclaw-skill.json` manifest declares highly restrictive permissions, denying network access and sensitive filesystem paths, while allowing only necessary read/write access and execution of specific, legitimate security tools (`trufflehog`, `semgrep`, `jq`, `python3`). There is no evidence of intentional harmful behavior or prompt injection attempts against the agent; instead, the skill is designed to identify such threats in other code.