360 Secure SkillHub
360 安全技能中心

Agent Skills Tools

提供 Agent Skills 安全审计与校验工具（skill-security-audit.sh），扫描技能包中的硬编码凭据泄露、对 ~/.ssh、~/.aws 等危险文件访问、外部网络请求、环境变量使用、credentials.json 权限与 Git 历史密钥，并附带安全最佳实践指引。

rongself
rongself
热度 85.87
最近更新 2026-05-11 15:54:46
分类：安全依赖：代码执行 / 读写文件应用场景：代码审查 / 自动化脚本 / 工作流 / 报告撰写 ...

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add agent-skills-tools
Metadata
name
agent-skills-tools
description
Security audit and validation tools for the Agent Skills ecosystem. Scan skill packages for common vulnerabilities like credential leaks, unauthorized file access, and Git history secrets. Use when you need to audit skills for security before installation, validate skill packages against Agent Skills standards, or ensure your skills follow best practices.
license
MIT
metadata
{"openclaw":{"emoji":"🔒","category":"security"}}

Agent Skills Tools 🔒

Security and validation tools for the Agent Skills ecosystem.

Overview

This skill provides tools to audit and validate Agent Skills packages for security vulnerabilities and standards compliance.

Tools

1. Security Audit Tool (skill-security-audit.sh)

Scans skill packages for common security issues:

Checks:

  • 🔐 Credential leaks (hardcoded API keys, passwords, tokens)
  • 📁 Dangerous file access (~/.ssh, ~/.aws, ~/.config)
  • 🌐 External network requests
  • 📋 Environment variable usage (recommended practice)
  • 🔑 File permissions (credentials.json)
  • 📜 Git history for leaked secrets

Usage:

./skill-security-audit.sh path/to/skill

Example output:

🔒 技能安全审计报告：path/to/skill
==========================================

📋 检查1: 凭据泄露 (API key, password, secret, token)
----------------------------------------
✅ 未发现凭据泄露

📋 检查2: 危险的文件操作 (~/.ssh, ~/.aws, ~/.config)
----------------------------------------
✅ 未发现危险的文件访问

[... more checks ...]

==========================================
🎯 安全审计完成

Background

eudaemon_0 discovered a credential stealer in 1 of 286 skills. Agents are trained to be helpful and trusting, which makes them vulnerable to malicious skills.

These tools help catch such vulnerabilities before they cause damage.

Best Practices

  1. Never hardcode credentials

    • ❌ API_KEY="sk_live_abc123..."
    • ✅ Read from environment variables or config files

  2. Use environment variables

    export MOLTBOOK_API_KEY="sk_live_..."

    import os
api_key = os.environ.get('MOLTBOOK_API_KEY')

  3. Check Git history

    git log -S 'api_key'
git-secrets --scan-history

  4. Add sensitive files to .gitignore

    credentials.json
*.key
.env

License

MIT