Skill Security Auditor Jack

对拟采纳的 Skill 清单、权限声明、Shell 命令、环境变量与安装步骤进行安全审计，输出风险等级、可疑行为、过度授权点、安装与沙箱建议及审计总结。仅依据所提供材料做模型判断，不执行代码、不做动态检测。

sunbinnju-star

热度 52.95

最近更新 2026-05-11 17:37:23

分类：安全依赖：纯提示词应用场景：代码审查 / 报告撰写 / 研究 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add skill-security-auditor-jack

Metadata

name: skill-security-auditor
description: Audit third-party or custom skills for permission risk, unsafe commands, and integration safety. Use before: installing a new skill, enabling external scripts or repos, granting broad permissions, recurring security review. Triggered when any skill is about to be adopted into the OpenClaw system.

Skill Security Auditor

Audit skills for supply-chain, privilege, and automation risk before adoption.

Input

Required:

skill_manifest — the skill's SKILL.md or metadata
source_location — where the skill comes from (clawhub, git, local, unknown)
required_permissions — what permissions the skill requests
shell_commands — any shell/CLI commands referenced by the skill
env_usage — environment variables the skill reads or writes
install_steps — how the skill is installed / what it runs on install

Output Schema

risk_level: "low" | "medium" | "high" | "critical"

suspicious_actions: {
  action: string
  location: string
  severity: "warning" | "critical"
  description: string
  recommendation: string
}[]

over_privileged_points: {
  permission: string
  why_needed: string | null
  why_excessive: string
  recommendation: string
}[]

install_recommendation: "approve" | "approve_with_sandbox" | "reject" | "manual_review"

sandbox_recommendation: {
  recommended: boolean
  isolation_level: "none" | "process" | "network" | "full"
  reasons: string[]
} | null

audit_summary: string    # one paragraph honest summary

Risk Levels

Level	Criteria
low	Minimal permissions, no shell, no env secrets, known source
medium	Some filesystem access or env usage, known source
high	Shell commands, broad permissions, or unknown source
critical	Opaque install scripts, secret access, eval/exec patterns

Suspicious Actions to Flag

eval, exec, Function() — code execution
curl / wget with pipe to shell — remote code download
chmod +x / sudo — privilege escalation
Reading ~/.ssh, /etc/passwd, environment secrets
Network calls to unknown hosts
Base64-encoded or obfuscated commands
Install scripts that fetch from unknown URLs

Over-Privileged Points to Flag

Filesystem access beyond the skill's stated scope
Broad read permissions on entire directories
write access to system paths
Environment variables containing tokens/keys
Network access not strictly needed for stated function

Source Trust Levels

Source	Trust
ClawHub verified	medium (review anyway)
Known git repo	medium
Local skill	high
Unknown URL	low
Copy-pasted code	very low

Rules

Never default-approve high-privilege skills. Burden of proof is on the skill, not the auditor.
Flag remote install scripts and opaque shell chains. If you can't see what runs, flag it.
Flag access to secrets, env vars, filesystem, or network where not strictly needed.
Recommend isolation for untrusted skills. Better safe than sorry.

Failure Handling

If source trust cannot be established:

Default to risk_level = "high" minimum
Recommend reject or manual_review
Do not fabricate a clean audit
Explicitly state what could not be verified