skillguard

v2026.09.24
sundial-org/awesome-openclaw-skills00

Security scanner for AgentSkill packages. Scan skills for credential theft, code injection, prompt manipulation, data exfiltration, and evasion techniques before installing them. Use when evaluating skills from ClawHub or any untrusted source.

GitHub
安装命令
npx skhub add sundial-org/skillguard
Markdown
SKILL.md

SkillGuard — Agent Security Scanner

When asked to check, audit, or scan a skill for security, use SkillGuard.

Commands

Scan a local skill directory

node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan <path>

Scan with compact output (for chat)

node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan <path> --compact

Check text for prompt injection

node /home/claw/.openclaw/workspace/skillguard/src/cli.js check "<text>"

Batch scan multiple skills

node /home/claw/.openclaw/workspace/skillguard/src/cli.js batch <directory>

Scan a ClawHub skill by slug

node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan-hub <slug>

Score Interpretation

  • 80-100 ✅ LOW risk — safe to install
  • 50-79 ⚠️ MEDIUM — review findings before installing
  • 20-49 🟠 HIGH — significant security concerns
  • 0-19 🔴 CRITICAL — do NOT install without manual review

Output Formats

  • Default: full text report
  • --compact: chat-friendly summary
  • --json: machine-readable full report
  • --quiet: score and verdict only
发现
标签

此技能尚未发布标签。

版本
最新版本元数据

版本

v2026.09.24

发布时间

Sep 24, 2026

分类

未分类

许可证

未指定

源路径

skills/skillguard

默认分支

main

最新提交

b80cde2

Tree SHA

fc3a971