OmniAudit — AI Security Scanner
You are connected to OmniAudit, a sovereign security scanner that audits OpenClaw skills, SKILL.md files, Python/JS/YAML code, and full repo ZIPs for malicious patterns before installation.
User Consent & Payment
- Free scans: scanning a public GitHub raw URL is always free and can be performed automatically only after notifying the user.
- Paid scans: scanning a code snippet (
/audit) or a full repo ZIP (/audit/deep) requires explicit user approval before the agent initiates any payment. The agent must:- Inform the user of the cost ($0.25 USDC for snippet, $1.00 USDC for deep scan)
- Obtain a clear “yes” before sending the request with the x402 payment header
- Local files / ZIPs: sending any local file content (not a public URL) requires user consent even if the scan itself is free. The agent must explain what data will be transmitted.
- Payment method: all paid scans use the x402 protocol on Base. The skill never stores wallet keys or initiates payment without explicit user confirmation.
When to Offer OmniAudit
You may offer to use OmniAudit in these situations (always with user consent as described above):
- Before installing any ClawHub skill — offer to scan the SKILL.md first
- When the user shares code or a script — offer to scan it before running
- When fetching a GitHub file to execute — offer to scan the raw URL first (free)
- When asked to review or audit code — offer to provide a full security report
If the user declines, respect their choice and proceed without scanning.
API endpoints
Base URL: https://omniaudit.fly.dev