skill-safe-installSkills 安全安装工具 - 整合 Vetter 代码审查 + ClawHub 评分 + ThreatBook 沙箱扫描三层验证
Install via ClawdBot CLI:
clawdbot install chj0w0/skill-safe-installRequires:
Grade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://github.com/CHJ0w0/OpenClaw_Skill_safe-installAI Analysis
The skill's stated purpose is security auditing, and the external API (ThreatBook) is consistent with that purpose. The rule-based signals appear to be examples or hypotheticals within the skill's own documentation for detecting malicious patterns, not evidence of the skill itself performing those actions. No hidden instructions or credential harvesting is evident in the provided definition.
Generated Mar 20, 2026
Large organizations use this tool to vet and install AI skills from third-party repositories securely. It ensures compliance with internal security policies by scanning for malicious code and verifying trustworthiness before deployment, reducing the risk of data breaches or system compromise.
Universities and training platforms integrate this skill to safely install educational AI tools for students and researchers. It automates security checks on open-source skills, preventing exposure to harmful scripts while maintaining an open learning environment.
Development teams incorporate this tool into their continuous integration pipelines to automatically validate AI skills before deployment. It streamlines security audits by combining code review, scoring, and sandbox analysis, ensuring only safe code reaches production environments.
Security firms use this skill to analyze and install threat detection AI tools from external sources. It provides layered verification to identify and block malicious components, enhancing the reliability of security solutions in high-risk environments.
Offer the basic tool for free with limited scans, then charge for enhanced ThreatBook API usage or priority support. This model attracts users with free security checks while monetizing advanced features and higher scan volumes.
Sell licenses to large organizations for integrating the tool into their internal systems with custom features like audit logs and compliance reporting. This targets businesses needing scalable, secure deployment solutions for AI skills.
Partner with AI skill marketplaces to embed this tool as a mandatory security layer, charging a fee per skill installation or a percentage of marketplace transactions. This leverages existing platforms to drive adoption and revenue.
💬 Integration Tip
Ensure the THREATBOOK_API_KEY is securely stored and regularly updated to maintain sandbox scanning functionality without interruptions.
Scored Apr 19, 2026
Audited Apr 16, 2026 · audit v1.0
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.