skill-quality-checker

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: skill-quality-checker Version: 1.0.0 The skill is a static analysis utility designed to audit and score other installed OpenClaw skills based on five quality dimensions. The core logic in scripts/check_quality.py uses standard Python libraries to parse markdown and source code for structural patterns (e.g., error handling, file size, metadata) without any evidence of data exfiltration, unauthorized network access, or malicious intent. The instructions in SKILL.md are consistent with the tool's stated purpose of providing quality reports and do not attempt to manipulate the agent into performing unauthorized actions.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may read local skill files and generate reports about them, so report contents could reveal information about installed skills if shared.

Why it was flagged

The documented workflow runs a local Python scanner over all installed skills; this is expected for the skill's purpose but gives it broad read access to installed skill files.

Skill content
python3 {SKILL_DIR}/scripts/check_quality.py --scan-dir /root/.openclaw/skills/
Recommendation

Run it only on skill directories you intend to review, and inspect any generated report before sharing it outside your environment.

What this means

Users have less external context for verifying the publisher or comparing the packaged script against an upstream source.

Why it was flagged

The skill includes a runnable Python script, but the registry metadata does not provide an external source or homepage for provenance checking.

Skill content
Source: unknown
Homepage: none
Recommendation

Review the included script and publisher identity before running it, especially in environments with sensitive installed skills.