Skill Auditor v2

面向 OpenClaw/ClawHub 第三方技能的安装前安全扫描器：以静态正则匹配、Base64 与十六进制反混淆、IoC 威胁库比对和社工话术识别为检测层，覆盖 Shell 执行、网络调用、环境变量读取、凭证窃取、仿冒包与零宽字符等风险，输出 0-100 风险评分、MITRE ATT&CK 映射、SHA256 文件清单，并可走隔离安装工作流。

aiwithabidi

热度 63.49

最近更新 2026-05-10 17:37:54

分类：安全依赖：代码执行 / 读写文件应用场景：代码审查 / 自动化脚本 / 工作流 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add skill-auditor-v2

Metadata

name: skill-auditor
version: 2.0.0
description: Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skill. Triggers: audit skill, check security, scan skill, is this skill safe, security review, quarantine.
license: MIT
compatibility: {"openclaw":">=0.10"}
metadata: {"openclaw":{"requires":{"bins":["python3"]}}}

Skill Auditor v2.0 🔍🛡️

Comprehensive security scanner for OpenClaw/ClawHub skills. Merges static analysis, deobfuscation, and threat intelligence into a single Python tool.

When to Use

Before installing any third-party skill from ClawHub
When reviewing skill updates for security regressions
To audit your own skills before publishing
When someone asks: "is this skill safe?", "audit this", "check security"

Quick Start

Audit a local skill directory

python3 {baseDir}/scripts/audit_skill.py /path/to/skill --human

Audit a ClawHub skill by slug

python3 {baseDir}/scripts/audit_skill.py --slug skill-name --human

Quarantine workflow (audit + prompt to install)

bash {baseDir}/scripts/quarantine.sh /path/to/skill
bash {baseDir}/scripts/quarantine.sh --slug skill-name

JSON output for programmatic use

python3 {baseDir}/scripts/audit_skill.py /path/to/skill --json

Scoring System

Score	Level	Action
0–20	✅ SAFE	Auto-install OK
21–40	🟢 LOW RISK	Proceed with caution
41–60	🟡 MEDIUM RISK	Manual review required
61–80	🟠 HIGH RISK	Expert review needed
81–100	🔴 CRITICAL	Do NOT install

Exit codes: 0 = safe (≤20), 1 = review (21–60), 2 = dangerous (>60)

Detection Layers

Layer 1: Static Pattern Analysis

10+ scan categories with regex patterns
Shell execution, network calls, env access, filesystem escape
Prompt injection, data exfiltration, crypto wallet access
Dynamic imports, browser credential theft, fake prerequisites

Layer 2: Deobfuscation

Base64 string extraction and decode → re-scan decoded content
Hex escape sequence decode → re-scan
Detects hidden commands, C2 IPs in encoded payloads

Layer 3: Threat Intelligence

IoC database: known malicious IPs, domains
Social engineering detection: urgency, false authority, fear tactics
MITRE ATT&CK ID mapping on every finding
Whitelist system reduces score for safe binaries/domains

Additional Checks

SHA256 file inventory for integrity verification
Typosquat detection (Levenshtein distance on package names)
Zero-width character detection in SKILL.md
Comment-context severity reduction (findings in comments scored lower)
Permission scope analysis (what tools does the skill request?)

IoC Database

Structured threat data in references/ioc-database.json. Update when new threats emerge. The scanner auto-loads this file at runtime.

References

references/ioc-database.json — Structured IoC data (IPs, domains, patterns)
references/known-patterns.md — Human-readable threat documentation
references/prompt-injection-patterns.md — Prompt injection pattern reference

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

Fork of skill-auditor-pro by sypsyp97, merged with skill-security-auditor by akm626.