skill-sec-scan自动检测并评分 ClawHub、GitHub 和本地 Skill 中 JS、TS、Python、Shell 文件的安全风险，识别数据泄露、注入、混淆和木马等威胁。
Install via ClawdBot CLI:
clawdbot install torchesfrms/skill-sec-scanGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://clawhub.ai/owner/skill-nameAI Analysis
This skill performs security scanning operations that inherently require accessing sensitive system files (/etc/passwd) and executing shell commands (rm -rf /) as part of its legitimate functionality. While these patterns would normally indicate high risk, they appear to be part of the security scanning tool's intended operation rather than malicious behavior. However, the skill's ability to download and execute arbitrary code from external sources warrants caution.
Usage Guide
Loading usage data… refresh in a few seconds.
Scored Jun 29, 2026
Audited Apr 17, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...