skill-scan
CommunityPre-scan OpenClaw skills for safe deployments.
Authordgriffin831
Version1.0.0
Installs0
System Documentation
What problem does it solve?
The Skill-Scan tool helps teams quickly identify security threats in agent skill packages before installation, reducing the risk of running unsafe code in AI agent environments.
Core Features & Use Cases
- Multi-layer threat detection combining fast pattern matching, JS/TS evasion analysis, prompt-injection checks, and optional LLM-powered semantic threat analysis.
- Alignment verification to ensure SKILL.md descriptions match actual code behavior and to surface trojan-like misalignments.
- Meta-analysis to correlate findings, reduce false positives, and surface missed threats across the skill package.
- ClawHub integration to scan skills directly from the registry and to verify external dependencies before installation.
- Flexible outputs and workflows for automation, including text reports, JSON, compact summaries, and alerting.
Quick Start
- Scan a local skill directory: skill-scan scan /path/to/skill
- Scan a skill from ClawHub: skill-scan scan-hub <slug>
- Batch scan installed skills: skill-scan batch /path/to/skills-directory
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: skill-scan Download link: https://github.com/dgriffin831/clawhub-skills/archive/main.zip#skill-scan Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.