Openclaw Skill Scanner

• Outcome: Review
• Latest audit: May 28, 2026, 10:12 AM
• Version:
  1.0.2

Overview

This is a transparent defensive scanner, but its install gate can fail open and install a skill when scanning fails, so users should review it before relying on it.

Install only if you are comfortable reviewing or patching the scan gate so scanner errors and unparsable reports block installation. Enable the optional systemd auto-scan only if you want persistent background monitoring that can move skills into quarantine, and consider pinning the external scanner and ClawHub CLI versions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 88% confidence
• Finding: The skill advertises and instructs use of multiple shell-capable binaries (`uv`, `npx`, `git`, `systemctl`) but does not declare corresponding permissions. This creates a transparency and policy-bypass problem: a user or host framework may treat the skill as low-privilege while it can invoke package managers, clone code, and install persistent user services.

Session Persistence

Medium

• Category: Rogue Agent

Content

cp -a "$HOME/.openclaw/skills/skill-scanner-guard/references/openclaw-skill-scan."* ~/.config/systemd/user/

systemctl --user daemon-reload
systemctl --user enable --now openclaw-skill-scan.path
```

Behavior:

• Confidence: 92% confidence
• Finding: systemctl --user enable

Session Persistence

Medium

• Category: Rogue Agent

Content

Install the units (templates are in `references/`):
```bash
mkdir -p ~/.config/systemd/user
cp -a "$HOME/.openclaw/skills/skill-scanner-guard/references/openclaw-skill-scan."* ~/.config/systemd/user/

systemctl --user daemon-reload

• Confidence: 90% confidence
• Finding: mkdir -p ~/.config/systemd/user cp -a "$HOME/.openclaw/skills/skill-scanner-guard/references/openclaw-skill-scan."* ~/.config/systemd/user/ systemctl --user daemon-reload systemctl --user enable --no

VirusTotal

65/65 vendors flagged this skill as clean.