360 Secure SkillHub
360 安全技能中心

Skill Fleet Monitor

该 Skill 审计本机已安装的 Skill:清点目录、比对 ClawHub 上的最新版本以发现版本漂移,并识别已被下架的 Skill。免费版仅含上述两项检查;发布者状态、安全公告、权限与恶意模式检测等检查未包含在内。需要联网访问 ClawHub,无需 API 密钥,输出为文本报告。

ordo-tech
ordo-tech
热度 48.68
最近更新 2026-05-11 17:41:17
分类:安全依赖:读写文件 / 第三方 API应用场景:DevOps / 工作流 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add skill-fleet-monitor
Metadata
name
skill-fleet-monitor
version
1.1.3
description
Scans all installed skills for version drift and delisted publishers. Free taster — full 6-check fleet health report in the ClawHub Ops Pack.
author
ordo-tech
tags
["security","audit","fleet","skills","monitoring","permissions","heartbeat"]
requires
{"env":[],"tools":["read","write","web_fetch","web_search"]}

What this skill does

Audits all installed skills and surfaces anything that needs attention.

Checks included (free version):

  • ✅ Version drift — which installed skills have updates available
  • ✅ Delisted skills — any installed skill removed from ClawHub (returns 404)

Not included (full version — Ops Pack):

  • Publisher standing checks (suspended/banned authors)
  • Security advisory cross-reference
  • Permission relevance audit (tools vs. stated purpose)
  • Known bad pattern detection (prompt injection, exfil patterns, identity spoofing)
  • Automated report saved to workspace audit trail
  • Heartbeat/cron integration with Telegram alerting

Get the full 6-check fleet scan → ClawHub Ops Pack


When to use it

  • After installing new skills, to establish a baseline
  • Monthly hygiene check
  • After a security advisory or incident

Usage

"Run a fleet health check on my installed skills" "Which of my skills need updating?" "Are any of my installed skills delisted?"


Output format

🛡️ Fleet Health Report (Free — 2/6 checks) — [Date]

Installed skills audited: N

✅ skill-name v1.0.0 — Up to date
⚠️ skill-name v0.9.0 — Update available (v1.1.0)
🚨 skill-name v1.0.0 — DELISTED (ClawHub returns 404)

---
*Full 6-check scan: https://theagentgordo.gumroad.com/l/clawhub-ops-pack*

Requirements

  • read — to inventory installed skill directories
  • web_fetch — to check ClawHub for current versions
  • web_search — to check publisher standing (full version)
  • No API keys required

Support

https://clawhub.com/@ordo-tech | Full Ops Pack: https://theagentgordo.gumroad.com/l/clawhub-ops-pack