my-test-skillIntelligent code security scanner with hybrid local-cloud detection. Fingerprints packages, runs static behavioral analysis, and consults cloud threat intell...
Install via ClawdBot CLI:
clawdbot install jinxiaotian1/my-test-skillGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
~/.ssh/id_rsaSends data to undocumented external endpoint (potential exfiltration)
POST → https://as.dun.163.com/v1/agent-sec/skill/checkPotentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://clawhub.comGenerated Mar 22, 2026
Development teams can integrate this skill into their CI/CD pipelines to automatically scan third-party dependencies before installation. It helps prevent malware, data leaks, and obfuscated code from entering production environments, ensuring only trusted packages are used.
Financial institutions can use this skill to vet external code libraries for regulatory compliance and security risks. The hybrid local-cloud analysis provides a quantified safety score, aiding in due diligence and audit trails for software procurement and integration.
Organizations adopting cloud-native technologies can deploy this skill as part of their DevSecOps toolchain to scan container images and serverless function packages. It identifies privilege abuse and malicious behaviors early, reducing attack surfaces in microservices architectures.
Universities and research labs can utilize this skill to safely analyze code from public repositories for academic projects. The ability to disable cloud intelligence allows use in air-gapped networks, while behavioral scanning helps identify potential threats in experimental software.
Software vendors can incorporate this skill into their quality assurance processes to scan their own packages before distribution. It ensures no unintended malicious code is included, building trust with customers through transparent security scoring and threat labeling.
Offer this skill as part of a premium security subscription, providing regular updates, enhanced cloud intelligence feeds, and priority support. Revenue is generated through monthly or annual fees from enterprises seeking advanced supply chain protection.
Provide a free version with basic local scanning and limited cloud intelligence, while charging for enterprise features like custom registry allowlists, detailed reporting, and API access. This model attracts individual developers and scales up to large organizations.
Generate revenue by offering professional services to integrate this skill into existing client systems, such as CI/CD pipelines or legacy infrastructure. Additional income comes from security consulting, custom rule development, and ongoing maintenance contracts.
💬 Integration Tip
Ensure the required binaries (curl, jq, openssl) are installed and accessible in the system PATH before integration, and configure the YIDUN_SKILL_SEC_CLOUD environment variable based on network access needs.
Scored Jun 19, 2026
Audited Apr 18, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...