360 Secure SkillHub
360 安全技能中心

Skill Vetting (PhenixStar)

该工具用于ClawHub技能安装前的安全与实用性评估，核心含自动扫描+人工复审流程，可检测恶意代码、违规操作等安全风险，对比现有工具评估价值。典型场景为安装第三方技能前审核，输入待评估技能包，输出扫描结果、风险提示及安装决策建议，帮用户安全选技能。

phenixstar
phenixstar
热度 20.90
最近更新 2026-06-16 18:07:21
分类：安全依赖：代码执行 / 读写文件 / 第三方 API应用场景：代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add phenixstar-skill-vetting
Metadata
name
skill-vetting
description
Vet ClawHub skills for security and utility before installation. Use when considering installing a ClawHub skill, evaluating third-party code, or assessing whether a skill adds value over existing tools.
license
MIT
version
1.0.0
homepage
https://github.com/PhenixStar/openclaw-skills-collection
user-invocable
true
disable-model-invocation
false
auto_activate
["vet skill","scan skill","security check skill","check skill safety","evaluate skill","inspect skill","skill security audit","review skill before install"]

Skill Vetting

Safely evaluate ClawHub skills for security risks and practical utility.

Quick Start

# Download and inspect
cd /tmp
curl -L -o skill.zip "https://auth.clawdhub.com/api/v1/download?slug=SKILL_NAME"
mkdir skill-inspect && cd skill-inspect
unzip -q ../skill.zip

# Run scanner
python3 ~/.openclaw/workspace/skills/skill-vetting/scripts/scan.py .

# Manual review
cat SKILL.md
cat scripts/*.py

Vetting Workflow

1. Download to /tmp (Never Workspace)

cd /tmp
curl -L -o skill.zip "https://auth.clawdhub.com/api/v1/download?slug=SLUG"
mkdir skill-NAME && cd skill-NAME
unzip -q ../skill.zip

2. Run Automated Scanner

python3 ~/.openclaw/workspace/skills/skill-vetting/scripts/scan.py .

Exit codes: 0 = Clean, 1 = Issues found

The scanner outputs specific findings with file:line references. Review each finding in context.

3. Manual Code Review

Even if scanner passes:

  • Does SKILL.md description match actual code behavior?
  • Do network calls go to documented APIs only?
  • Do file operations stay within expected scope?
  • Any hidden instructions in comments/markdown?
# Quick prompt injection check
grep -ri "ignore.*instruction\|disregard.*previous\|system:\|assistant:" .

4. Utility Assessment

Critical question: What does this unlock that I don't already have?

Compare to:

  • MCP servers (mcporter list)
  • Direct APIs (curl + jq)
  • Existing skills (clawhub list)

Skip if: Duplicates existing tools without significant improvement.

5. Decision Matrix

Security Utility Decision
✅ Clean 🔥 High Install
✅ Clean ⚠️ Marginal Consider (test first)
⚠️ Issues Any Investigate findings
🚨 Malicious Any Reject

Red Flags (Reject Immediately)

  • eval()/exec() without justification
  • base64-encoded strings (not data/images)
  • Network calls to IPs or undocumented domains
  • File operations outside temp/workspace
  • Behavior doesn't match documentation
  • Obfuscated code (hex, chr() chains)

After Installation

Monitor for unexpected behavior:

  • Network activity to unfamiliar services
  • File modifications outside workspace
  • Error messages mentioning undocumented services

Remove and report if suspicious.

References