auto-skill-scannerAuto Skill Scanner - 自动化AI技能安全监控工具。每日自动扫描已安装的OpenClaw技能，发现硬编码凭证、Shell注入、网络泄露等安全隐患，报告推送至Telegram/飞书等渠道。触发词：scan skills、扫描技能、安全扫描。
Install via ClawdBot CLI:
clawdbot install ohmanymoneygomyhome-creator/auto-skill-scannerGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
eval(Accesses system directories or attempts privilege escalation
/proc/AI Analysis
The skill's stated purpose is security auditing, which inherently requires accessing files and executing commands to scan for vulnerabilities. The detected signals (accessing /etc/passwd, using eval, scanning /proc) are consistent with this purpose. However, granting a skill broad system access to scan all other installed skills creates a significant attack surface and potential for privilege escalation if the skill itself were compromised or malicious.
Usage Guide
Loading usage data… refresh in a few seconds.
Scored Jun 29, 2026
Audited Apr 16, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...