Shoofly Plugin Scan

Pre-install plugin security scanner for OpenClaw plugins

Security Scan

Instruction-only pre-install plugin scanner that is internally consistent with its stated purpose; no surprising permissions or installs are requested, though the SKILL.md is slightly ambiguous about whether it merely scans plugin files or might access local system files.

Purpose & Capability

Name/description match the instructions: the SKILL.md describes checks you would expect from a pre-install security scanner (credential patterns, obfuscated code, network URLs, sensitive path references, exec patterns). There are no unrelated required env vars, binaries, or install steps.

Instruction Scope

The instructions are high-level and scoped to scanning a plugin directory. However, the wording around "Sensitive path access — ~/.ssh, ~/.aws, ~/.gnupg, /etc/passwd" is ambiguous: it likely means "look for code that accesses these paths" rather than "read these paths on the host," but the doc does not explicitly forbid or clarify reading host system files or making network requests. Clarification is recommended.

Install Mechanism

No install spec and no code files — this is instruction-only, which minimizes risk because nothing is downloaded or written by default.

Credentials

No environment variables, credentials, or config paths are required in the registry metadata; that is proportionate for a static scanner.

Persistence & Privilege

Does not request always:true or any persistent/system-wide changes. Default autonomous invocation allowed (normal for skills) but there is no indication the skill would modify other skills or agent config.

Assessment

This appears to be a coherent instruction-only plugin scanner. Before installing or running it, ask the author (or check implementation) to confirm two things: (1) the scanner only analyzes files in the provided plugin directory and does not read host-sensitive files (e.g., ~/.ssh, ~/.aws, /etc/passwd) or other unrelated system paths; and (2) it does not exfiltrate plugin contents or make external network calls — the "Unusual network calls" check should be a pattern check, not an outbound fetch. Also verify the scanner's provenance (source code or homepage) before trusting results, and run it on untrusted plugins inside a sandbox or isolated environment until you confirm its behavior.

Scans an OpenClaw plugin directory for security issues before installation.

Usage

shoofly-plugin-scan <path-to-plugin>

Checks

1. Credential patterns — API keys (sk-, ghp_, AKIA*), private keys
2. Obfuscated code — long hex/base64 strings, eval(), Function() constructor
3. Unusual network calls — URLs not in the trusted allowlist
4. Sensitive path access — ~/.ssh, ~/.aws, ~/.gnupg, /etc/passwd, credentials
5. Exec patterns — child_process.exec with variable args, shell: true

Exit codes

Code	Meaning
0	Clean — no findings
1	Findings — review before installing
2	Scan error

Allowlisted hosts

github.com, npmjs.com, openclaw.ai, clawhub.com, shoofly.dev