AI Agent Skill Scanner

Security scanner for AI agent skills. Detects hardcoded secrets, unsafe code execution, prompt injection, and malware patterns in under 50ms. Scan before you install.

Scan any skill for security issues before you install it. Detects hardcoded secrets, unsafe code execution, prompt injection, and malware patterns in under 50ms.

How to Use

bash

# Scan any installed skill folder
python3 scripts/vetter.py /path/to/skill

# JSON output for scripting
python3 scripts/vetter.py /path/to/skill --json

What It Detects

Issue	Severity	Example
eval() / exec()	Critical	Runs arbitrary code
Pipe to shell	Critical	`curl ...
Destructive commands	Critical	rm -rf /, mkfs.
os.system()	Critical	Shell commands
Hardcoded API keys	High	api_key, apikey
shell=True	High	Shell injection risk
Hardcoded secrets	High	auth_token, secret
Credential file access	High	.ssh/, .aws/
Sudo elevation	High	sudo commands
Base64 obfuscation	High	Hidden code execution
Git config access	High	.git/config reads
Password hardcoding	High	password literal
Permission overrides	Medium	chmod 777
Network calls	Medium	requests.post()

New in v2.1

• 10 new detection signatures (pipe-to-shell, sudo escalation, destructive commands, credential file access, base64 obfuscation, git config, permission overrides)
• Skips node_modules/, __pycache__/, .git/ (reduced false positives)
• Smarter pipe-to-shell detection (only flags actual pipe patterns)
• Self-scan exclusions (scanner ignores its own signatures file)
• --verbose flag for skipped file counts

Example Result

text

Scanned 430 files in 368ms (skipped 6)
Found 1 issue(s):
  [CRITICAL] pipe-to-shell at install.sh:26
    → Remote code execution risk: downloading and piping to shell

Install

bash

clawhub install ai-agent-skill-scanner

Notes

• Text matching — won't catch obfuscated code
• Always scan skills from unknown publishers before installing
• Quick scan prevents accidents (50ms per skill)

Feedback

clawhub star ai-agent-skill-scanner — clawhub sync