Skill Security Scanner

• Analyzed: May 11, 2026, 3:31 AM
• Findings: 1
• Version: 1.1.0
• Hash: e2c7718b8333947a4b4c8be6d855a83b63c35d019bdade82667a78c0d9001d38
• Source: palm
• External report: View on VirusTotal

Findings (1)

This OpenClaw skill, 'claw-skill-guard', is a security scanner designed to detect malicious patterns, suspicious URLs, and install traps in other skills. Its Python script (`scripts/scanner.py`) performs file system operations (reading skill files, extracting ZIPs to temp directories) and network requests (fetching remote skills from ClawHub or GitHub) which are all necessary for its stated purpose. The `SKILL.md`, `README.md`, and `examples/agents-policy.md` files contain instructions for the AI agent that are explicitly defensive, guiding the agent to exercise caution, run the scanner, and seek human approval for high-risk actions. There is no evidence of intentional harmful behavior, data exfiltration, unauthorized execution, or persistence mechanisms within this skill itself; rather, it aims to prevent such actions by other skills.