360 Secure SkillHub
360 安全技能中心

Skill Safety Scanner

该 Skill 调用 OpenClaw 自带安全审计，解析技能相关发现，为已安装技能评定 SAFE/WARN/DANGEROUS，并以文本报告列出证据和移除命令；经用户确认可执行 clawhub uninstall 与 rm -rf 删除危险技能。声明零网络调用、不访问凭据。

infectit007
infectit007
热度 37.08
最近更新 2026-07-16 22:09:39
分类：安全依赖：代码执行 / 读写文件 / 内部调用大模型应用场景：代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add skill-safety-scanner
Metadata
name
skill-safety-scanner
description
Scan your installed ClawHub skills for dangerous code patterns — credential harvesting, shell injection, unauthorized network calls, and known malicious signatures. Produces a per-skill safety report with SAFE/WARN/DANGEROUS ratings and one-command removal instructions. Use when you want to audit skills before trusting them, after installing new skills, or after the ClawHub security incident. No data leaves your machine.

Skill Safety Scanner

Scans every installed skill in your OpenClaw workspace for dangerous code patterns. Produces a per-skill SAFE / WARN / DANGEROUS rating with exact evidence and removal commands.

Why this exists: ~20% of ClawHub skills have been flagged for malicious patterns including credential harvesting, shell injection, and C2 callbacks. This skill surfaces those issues before they can cause damage — using OpenClaw's own built-in scanner, not a third party.

Privacy guarantee: Runs entirely on your machine. Zero network calls. Zero data exfiltration. You can read every line of this skill — it is a single SKILL.md file.

How it works

This skill uses openclaw security audit --deep --json which already scans all installed skills for dangerous patterns. It then parses, formats, and explains the findings per-skill.

No new scanning code. No dependencies. Just OpenClaw's own trusted scanner with better output.

Workflow

1. Run the scanner

openclaw security audit --deep --json

Capture the full JSON output.

2. Extract skill findings

From the JSON, find all entries where id starts with skills. — these are skill-specific findings.

Key finding IDs to look for:

Finding ID Meaning
skills.code_safety Dangerous patterns detected in skill code
skills.untrusted_exec Skill executes shell commands
skills.env_harvesting Skill reads env vars AND makes network calls
skills.network_exfil Skill sends data to external hosts
skills.permission_escalation Skill requests elevated permissions

3. Rate each skill

For each installed skill, assign a rating:

Rating Criteria
✅ SAFE No dangerous patterns found
⚠️ WARN Shell exec OR env access (not combined) — review source
🔴 DANGEROUS Env harvesting + network send combined, or known malicious signature

4. Format the report

SKILL SAFETY SCAN — YYYY-MM-DD HH:MM
Scanned: X skills   Safe: X   Warn: X   Dangerous: X

──────────────────────────────────────
🔴 DANGEROUS — [skill-name]
   Path: ~/.openclaw/workspace/skills/[skill-name]
   Issue: [env-harvesting] Reads API keys and sends to external host
   Evidence: [filename]:[line] — [code snippet]
   Action: clawhub uninstall [skill-name]
           rm -rf ~/.openclaw/workspace/skills/[skill-name]

⚠️  WARN — [skill-name]
   Path: ~/.openclaw/workspace/skills/[skill-name]
   Issue: [dangerous-exec] Executes shell commands via child_process
   Evidence: [filename]:[line]
   Action: Review source before use. Remove if not needed:
           clawhub uninstall [skill-name]

✅ SAFE — [skill-name]   (no findings)
──────────────────────────────────────

RECOMMENDATION
[If any DANGEROUS skills]: Remove immediately — treat as compromised.
[If any WARN skills]: Review source at the path above before next use.
[If all SAFE]: Your skill set is clean. Re-scan after any new install.

5. Optional: Auto-remove dangerous skills

If the user confirms, execute removal for DANGEROUS-rated skills:

# For each DANGEROUS skill named [skill-name]:
clawhub uninstall [skill-name] 2>/dev/null
rm -rf ~/.openclaw/workspace/skills/[skill-name]

Always show the command and ask for confirmation before removing anything.

6. Re-scan to confirm

After any removals:

openclaw security audit --deep

Confirm the skills.code_safety finding is gone.

Scheduling

To scan automatically after every new skill install, or on a daily schedule:

openclaw cron add --name "skill-safety-scanner:daily" --cron "0 3 * * *" \
  --prompt "Run the skill-safety-scanner skill and report findings to memory."

What this skill does NOT do

  • Does not send any data to external servers
  • Does not modify any files without explicit confirmation
  • Does not connect to the internet
  • Does not access credentials or API keys
  • Does not install anything
  • Single SKILL.md file — inspect the full source above

Notes

  • Run this scan after every new ClawHub skill install
  • WARN ratings are not always malicious — many legitimate skills use shell exec (e.g., tools that run git or npm). Review the source and make your own judgment.
  • DANGEROUS = env harvesting + network send in the same file. This combination has no legitimate use case in a passive skill.
  • If OpenClaw updates its scanner signatures, re-run this skill to catch newly detected patterns.