Security audit
OpenClaw Skills Doctor
Security checks for vulnerabilities and agentic risk
Overview
This package provides a coherent local skill-auditing tool with disclosed installation changes and optional repairs, though its external audit engine remains unverified.
Start with audit commands and preview repairs with --dry-run before changing skills. Installation modifies and backs up openclaw.json; --plugin also enables startup loading. Review the external opencode-skills-doctor dependency and confirm which directories the MCP integration scans, since it bypasses the wrapper's directory filters. Its implementation was unavailable for inspection. Reports can expose local paths and skill descriptions to your agent, and the documentation discloses an optional npm update check.
SkillSpector was not run because this plugin release contains no bundled skills.