Skill Guardian

Safely manage your AI skill collection with trust scoring, security vetting, delayed auto-updates, and pending periods for new skills. Use when adding new skills, monitoring skill security, tracking versions, or preventing risky automatic updates. Features intelligent update rules (high-trust skills update immediately, others wait 10 days) and 5-10 day pending period for new skill additions. Perfect for users who want a curated, secure skill library without surprises.

Audits

Warn

ClawScanWarn

Agentic behavior and permission review.

Static analysisPass

Pattern checks against bundled files.

VirusTotalPass

Multi-engine malware detections and file reputation.

Install

openclaw skills install skill-guardian

Skill Guardian 🛡️

Your AI skill security guard — Track, vet, and safely update your skill collection.

Tags: security skill-management trust-scoring auto-update cron-ready safety version-control curation vetting guardian

Why Use Skill Guardian?

🔒 Security First — Auto-scans every skill before adding
📊 Trust Scores — Know which skills are safe at a glance
⏰ Smart Updates — High-trust skills (≥90) update immediately, others wait 10 days
📝 Pending Period — New skills wait 5-10 days before activation
🤖 Auto-Scheduled — Runs 1-2 times daily automatically

Quick Start

1. Install & Setup

# Install the skill
clawhub install skill-guardian

# Set up automated monitoring (recommended)
# See "Automated Scheduling" section below

2. Add a Skill Safely

python3 scripts/add_skill.py --name summarize --source clawhub

Skill Guardian will:

✅ Run security checks
✅ Assign trust score (0-100)
✅ Add to pending queue (5-10 days)
✅ Auto-promote after waiting period

3. View Your Collection

python3 scripts/list_skills.py          # Active skills
python3 scripts/show_skill.py summarize # Detailed info

4. Smart Updates

Check for updates:

python3 scripts/check_updates.py

Apply updates (intelligent rules):

python3 scripts/apply_updates.py --all

Update Rules:

🌟 Trust ≥90: Immediate update
⏳ Trust 70-89: 10-day grace period
🛑 Trust <70: Manual approval required

Override for urgent updates:

python3 scripts/apply_updates.py summarize --force

5. Process Pending Skills

Manually check pending queue:

python3 scripts/process_pending.py

Automated Scheduling ⏰ (Recommended)

Skill Guardian works best when run automatically 1-2 times daily.

Option 1: System Cron

Add to crontab for morning (8am) and evening (8pm) runs:

# Edit crontab
crontab -e

# Add these lines
0 8 * * * cd /path/to/workspace && python3 skills/skill-guardian/scripts/auto_run.py
0 20 * * * cd /path/to/workspace && python3 skills/skill-guardian/scripts/auto_run.py

Option 2: Single Daily Run

# Once daily at 9am
0 9 * * * cd /path/to/workspace && python3 skills/skill-guardian/scripts/auto_run.py

Option 3: Manual Execution

If you prefer manual control:

# Full auto-run workflow
python3 skills/skill-guardian/scripts/auto_run.py

# Or step by step:
python3 scripts/process_pending.py      # Promote pending skills
python3 scripts/check_updates.py        # Check for updates
python3 scripts/apply_updates.py --all  # Apply updates

What Auto-Run Does

Each execution performs:

🔍 Process Pending — Promote skills that passed 5-10 day waiting period
📦 Check Updates — Detect new versions of all skills
🔄 Apply Updates — High-trust (≥90) update immediately, others queued
📊 Report Status — Show current registry state

Trust Score Explained

Score	Level	Update Behavior	Badge
90-100	🟢 Verified	Immediate auto-update	🌟
70-89	🟡 Trusted	10-day grace period	⏳
50-69	🟠 Caution	Manual approval required	⚠️
<50	🔴 Risky	Blocked from auto-add	🛑

Included Trusted Skills

Skill	Trust	Source	Purpose
jax-skill-security-scanner	92	clawhub	Advanced security scanning
skill-vetter	95	clawhub	Security vetting
find-skills	90	clawhub	Discover skills
skill-creator	85	clawhub	Create new skills

New Skill Workflow

User/Auto-detect finds skill
        ↓
   Security vetting
        ↓
   PENDING queue (5-10 days)
        ↓
   Waiting period
        ↓
   Auto-promoted ✓

Update Workflow

Check detects new version
        ↓
   Trust ≥90? ──→ Immediate update
        ↓ No
   10-day delay
        ↓
   Auto-apply