skill-guard-snyk-agent-scanScan ClawHub skills for security vulnerabilities BEFORE installing. Use when installing new skills from ClawHub to detect prompt injections, malware payloads...
Install via ClawdBot CLI:
clawdbot install firefrog-pepe/skill-guard-snyk-agent-scanGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Contains instructions to override system prompt or ignore user requests
"IGNORE PREVIOUS INSTRUCTIONS"Potentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://astral.sh/uv/install.shAI Analysis
The skill definition explicitly describes and references prompt injection techniques ('IGNORE PREVIOUS INSTRUCTIONS') and destructive shell commands ('rm -rf /') as examples of threats it detects, not as its own behavior. However, the rule-based signals found indicate these patterns are present within the skill's own content, suggesting it may be demonstrating or containing the malicious code it claims to guard against, creating a potential risk.
Generated Mar 20, 2026
Large organizations deploying custom AI agents across departments use skill-guard to vet third-party skills from ClawHub before installation, ensuring compliance with security policies and preventing data breaches from prompt injections or malware. This is critical in regulated industries like finance or healthcare where agent actions must be secure and auditable.
Software development teams integrating AI agents into their workflows use skill-guard to scan skills for hardcoded secrets or malicious code before installation, protecting source code and CI/CD pipelines from compromise. This prevents accidental exposure of API keys or tokens through skill dependencies.
Academic institutions and researchers experimenting with AI agents use skill-guard to safely test new skills from ClawHub, quarantining threats to avoid system corruption while analyzing emerging AI-specific vulnerabilities like hidden instructions. This supports secure exploration in lab environments.
Independent professionals using AI agents for tasks like content creation or data analysis use skill-guard to verify skills before installation, preventing malware that could steal client data or disrupt workflows. It offers a lightweight security layer without enterprise overhead.
Developers contributing to or using open-source AI agent projects rely on skill-guard to scan community-shared skills for threats like data exfiltration URLs, ensuring trust in collaborative ecosystems. This fosters safer skill sharing and adoption in platforms like ClawHub.
Offer skill-guard as a free open-source tool for basic scanning, with premium features like advanced threat intelligence, team management dashboards, or API access for automated workflows. Revenue comes from subscriptions for enterprises needing enhanced security and reporting.
License skill-guard to large organizations as part of a broader AI security suite, integrating with their existing DevOps tools and compliance frameworks. Revenue is generated through annual licenses, support contracts, and custom integration services tailored to industry needs.
Partner with ClawHub or similar platforms to embed skill-guard as a default security check for skill installations, charging a fee per scan or taking a commission on safe skill transactions. This monetizes trust and safety features directly within the ecosystem.
💬 Integration Tip
Set the SNYK_TOKEN environment variable before use to enable authenticated scanning with Snyk Agent Scan, and ensure the safe-install.sh script has execute permissions for seamless integration into existing clawhub workflows.
Scored Jun 17, 2026
Audited Apr 16, 2026 · audit v1.0
Manage and operate ClawSec Monitor v3.0, a MITM HTTP/HTTPS proxy that logs AI agent traffic, detects exfiltration and injection threats in real time.
Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.
Security scanner for ClawHub skills. Vet third-party skills before installation — detect dangerous patterns, suspicious code, and risky dependencies.
Security audit and hardening for AI agents — credential hygiene, secret scanning, prompt injection defense, data leakage prevention, and privacy zones.
Scan OpenBot/Clawdbot skills for security vulnerabilities, malicious code, and suspicious patterns before installing them. Use when a user wants to audit a skill, check if a ClawHub skill is safe, scan for credential exfiltration, detect prompt injection, or review skill security. Triggers on security audit, skill safety check, malware scan, or trust verification.
OpenClaw skill discovery, security vetting & install. Searches 3000+ curated skills from ClawHub registry and awesome-openclaw-skills catalog. Scores credibility, detects prompt injection & malicious patterns, manages installations. Quick-checks GitHub for new skills.