skill-security-vet技能安全審核 - 整合本地掃描 + VirusTotal 雲端威脅情報
Install via ClawdBot CLI:
clawdbot install lanew197894fun-cmd/skill-security-vetGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://virustotal.comAI Analysis
This skill is a security auditing tool designed to scan other skills; its access to sensitive paths like /etc/passwd is for detection purposes, not credential harvesting. The external call to VirusTotal is explicitly documented and consistent with its stated purpose of cloud threat intelligence. No hidden instructions or obfuscation suggesting malicious override of user intent were found.
Generated May 20, 2026
企業使用OpenClaw平台管理內部技能，需要定期對所有已安裝技能進行安全掃描，確保沒有惡意代碼或高危函數。結合本地掃描和VirusTotal雲端威脅情報，自動生成審核報告，及時發現並處理風險。
開源技能市場運營者需要在技能上架前進行安全審核，防止惡意技能進入市場危害用戶。使用本技能可自動化掃描提交的技能包，檢測危險函數並與VirusTotal比對，確保上架技能的安全性。
開發團隊在CI/CD流程中集成安全審核，每次構建時自動掃描新技能或更新技能。本地掃描快速檢測常見風險，VirusTotal提供深度雲端分析，確保只有安全的技能才能部署到生產環境。
個人開發者開發自用技能或參與開源項目時，使用本技能對自己編寫的技能進行安全自查，避免因疏忽引入高危函數或惡意程式碼。提供清晰的風險分級和修復建議，提升技能質量。
安全團隊發現可疑技能時，使用本技能快速進行深入分析。本地掃描定位潛在危險模式，VirusTotal查詢全球威脅情報，幫助團隊迅速判斷威脅等級並決定處置措施。
提供技能安全審核SaaS服務，企業按技能數量或掃描次數訂閱。包含定期報告、API集成和高級威脅情報功能。收入來自訂閱費用。
基礎安全審核功能開源免費使用，商業版提供更高頻率的VirusTotal掃描、自定義規則、優先支持等。吸引開發者使用開源版，企業購買增強版。收入來自商業版授權費。
提供技能安全審核工具外，還提供安全諮詢服務，如定制掃描規則、漏洞修復指導、安全培訓等。項目制收費或訂閱制。收入來自諮詢費和服務費。
💬 Integration Tip
使用CLI命令即可快速集成到CI/CD管道中，建議將掃描步驟添加到構建流程的測試階段，並設定高風險結果導致構建失敗。
Scored Jun 29, 2026
Audited Apr 16, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...