gh-skillscanScan an OpenClaw SKILL.md file for security threats before installing it. Posts the raw SKILL.md content and gets back a safety score (0-1), detected threat...
Install via ClawdBot CLI:
clawdbot install mirni/gh-skillscanGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://api.greenhelix.net/skillscan/v1/scan-skillCalls external URL not in known-safe list
https://api.greenhelix.net/skillscan/v1/scan-skillAI Analysis
The skill's primary function is to scan other skills for security risks, and its documented external API call (api.greenhelix.net) is consistent with this stated purpose. While it sends skill content to an external server for analysis, this is the core functionality and not hidden credential harvesting or unauthorized data exfiltration. The risk is low as the data transfer is expected and for the declared security analysis service.
Audited Apr 16, 2026 · audit v1.0
Usage Guide
Loading usage data… refresh in a few seconds.
Scored Aug 28, 2026
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.
macOS Gateway 24/7 watchdog with 4-layer health checks and auto-repair. Monitors: L1 process alive, L2 HTTP port, L3 WebSocket communication (1006 detection)...