safe-skill-advisorSecurity Skill Advisor - Protect you from malicious skills on ClawHub. Provides security warnings, tool recommendations, and 30-second self-check checklist.
Install via ClawdBot CLI:
clawdbot install crystaria/safe-skill-advisorGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
curl | bashCalls external URL not in known-safe list
https://clawhub.ai/skills/safe-skill-advisorAI Analysis
The skill promotes security awareness and recommends legitimate, open-source security tools, but its own homepage URL is external and not pre-vetted, creating a minor trust-on-first-use risk. It does not contain hidden instructions, credential harvesting, or data exfiltration patterns.
Audited Apr 17, 2026 · audit v1.0
Generated Mar 20, 2026
Users evaluate third-party AI skills before installation to prevent malware, data theft, or credential compromise. The skill provides automated scanning tools like Cisco AI Skill Scanner and a manual checklist to identify risks such as suspicious installation commands or unauthorized permissions.
Users suspect a previously installed skill is malicious and need to mitigate damage. The skill guides them through uninstallation, password changes, system log checks, and deep security scans to remove threats and secure compromised accounts or keys.
Organizations or individuals seek to educate themselves on AI skill safety protocols. The skill offers structured guidance on common attack methods, high-risk skill types, and tools like SecureClaw for ongoing protection and behavior monitoring.
Users discover and report suspicious skills to platforms like ClawHub to protect the broader community. The skill outlines steps for documenting evidence, using official reporting channels, and warning others without spreading malicious content.
Offer basic scanning features for free to attract users, then monetize through premium versions with advanced protections like real-time monitoring or enterprise support. Partnerships with tool developers like Cisco or SecureClaw could drive adoption and revenue.
Provide paid services for organizations needing in-depth security audits of AI skill ecosystems. This includes custom risk assessments, compliance checks, and tailored recommendations based on the skill's knowledge base of attack methods and best practices.
Collaborate with AI platforms like ClawHub to integrate the skill as a default safety advisor. Earn revenue through referral commissions for security tool downloads or a share of premium subscriptions driven by the skill's recommendations.
💬 Integration Tip
Integrate with existing AI platforms via APIs to automate skill scanning and provide real-time alerts, ensuring seamless user experience without manual setup.
Scored Jun 19, 2026
Fetch and read transcripts from YouTube videos. Use when you need to summarize a video, answer questions about its content, or extract information from it.
Monitor RSS and Atom feeds for content research. Track blogs, news sites, newsletters, and any feed source. Use when monitoring competitors, tracking industr...
用 MinerU API 解析 PDF/Word/PPT/图片为 Markdown,支持公式、表格、OCR。适用于论文解析、文档提取。
Provides a personalized morning report with today's reminders, undone Notion tasks, and vault storage summary for daily planning.
Extract text from PDFs with OCR support. Perfect for digitizing documents, processing invoices, or analyzing content. Zero dependencies required.
Fetch scheduled economic events and data releases from the FMP API for specified dates, filtering by impact, country, and type, and output a chronological ma...