scopecheckAnalyze an OpenClaw SKILL.md and extract its permission scope — what env vars, CLI tools, filesystem paths, and network URLs it accesses. Compares declared r...
Install via ClawdBot CLI:
clawdbot install mirni/scopecheckGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://api.greenhelix.net/scopecheck/v1/check-scopeCalls external URL not in known-safe list
https://api.greenhelix.net/scopecheck/v1/check-scopeAudited Apr 17, 2026 · audit v1.0
Generated May 11, 2026
An organization uses multiple AI skills and wants to ensure each skill only accesses declared resources. Scopecheck automates the detection of undeclared environment variables, CLI tools, filesystem paths, and network URLs, helping security teams verify compliance before deployment.
A development team integrates Scopecheck into their CI/CD pipeline to automatically validate SKILL.md files whenever a new skill is submitted. This prevents unauthorized resource access from reaching production, reducing security risks.
An AI skill marketplace uses Scopecheck to vet skills uploaded by third-party developers. It ensures that every skill's declared permissions match actual access, building trust with users and platform integrity.
A financial services company must comply with regulations that require strict control over AI agent capabilities. Scopecheck provides an automated audit trail of resource access, supporting compliance reports and internal reviews.
Host the Scopecheck API and charge per request or subscription. Companies pay for automated security checks on their skills, with tiered pricing based on volume.
Offer Scopecheck as open source with community support, and sell enterprise licenses that include premium features like advanced reporting, SLA guarantees, and dedicated integration support.
Bundle Scopecheck into a broader AI security platform that includes runtime monitoring, threat detection, and policy enforcement. Upsell as part of a comprehensive solution.
💬 Integration Tip
To integrate Scopecheck, simply send a POST request with the SKILL.md content to the hosted API endpoint, or run the standalone server locally via uvicorn.
Scored Jul 12, 2026
Real-time search engine supporting web search, vertical domain search, parallel batch search, and URL content extraction.
Manage Feishu (Lark) calendars by listing, searching, checking schedules, syncing events, and marking tasks with automated date extraction.
Process multiple items with progress tracking, checkpointing, and failure recovery.
cad reference tool
Search, install, and create OpenClaw skills using intelligent matching across built-in, local, and GitHub skill repositories.
Use when building CLI tools, implementing argument parsing, or adding interactive prompts. Invoke for CLI design, argument parsing, interactive prompts, progress indicators, shell completions.