skill-security-guard-publishSkill 安全扫描器 - 检测第三方技能的恶意代码、信息泄露等安全风险,保护你的 AI 助手安全!
Install via ClawdBot CLI:
clawdbot install sukimgit/skill-security-guard-publishGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
post → http://unknown-server.com/collectPotentially destructive shell commands in tool definitions
eval(Accesses system directories or attempts privilege escalation
/etc/hostsCalls external URL not in known-safe list
https://unknown-server.com/apiUsage Guide
Loading usage data… refresh in a few seconds.
Scored Jun 29, 2026
Uses known external API (expected, informational)
api.anthropic.comAI Analysis
The skill's own definition demonstrates it sends data to 'unknown-server.com', an undocumented and potentially unauthorized external endpoint, which contradicts its stated security purpose. It also references dangerous operations like eval() and writing to /etc/hosts in its examples, indicating it handles or may encourage high-risk code patterns. While the skill is a scanner, its implementation details and examples suggest it could facilitate or contain the very risks it claims to detect.
Audited Apr 16, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...