Skill Auditor for Openclaw

A deep auditing and optimization CLI utility for local Openclaw Skills environments, providing comprehensive usage analysis, permission reviews, and automated cleanup scripts.

harrylabsj
v1.0.0
Jun 14, 2026
0
391
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install audit-tool

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install audit-tool using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is Skill Auditor?

Skill Auditor is a robust diagnostic utility built specifically for managing local agent environments. It scans local installations to read metadata, files, permissions, dependencies, and execution history. As your library of Openclaw Skills grows, Skill Auditor ensures your agent system remains lean, performant, and secure by detecting over-privileged actions, finding duplicate functionality, and pruning inactive skills.

By assessing five core vectors—Activity, Security, Stability, Maintainability, and Documentation quality—this tool delivers a comprehensive health score from 0-100. It empowers developers and system administrators to maintain clear oversight of AI agent behavior and resource utilization, generating ready-to-execute cleanup scripts to optimize local environments safely.

Skill Auditor Use Cases

  • Analyze local Openclaw Skills to identify unused or zombie skills that consume disk space or clutter your environment.
  • Perform a security audit to detect over-privileged helper scripts or tools with unauthorized access to commands like exec or web_fetch.
  • Identify conflicting tool names, namespace collisions, and circular dependencies among multiple custom skills.
  • Generate automated cleanup shell scripts with dry-run support to safely uninstall, disable, or archive outdated tools.

How Skill Auditor Works

  1. Scan Installation: The tool recursively parses files under ~/.openclaw/skills/ to read skill configurations, dependencies, licenses, and permission declarations.
  2. Usage Analysis: It processes session logs and invocation patterns within a configurable time window to classify skills by usage trends and identify zombie installations.
  3. Security Audit: Checks declared tool permissions against actual execution logs to pinpoint over-privileged definitions and high-risk utility access.
  4. Conflict Detection: Performs pairwise analysis of metadata descriptions and namespaces to prevent duplicate functionality and dependency loops.
  5. Score & Script Generation: Calculates a weighted health score (0-100) and exports cleanup bash scripts alongside structural Markdown reports or HTML dashboards.

Skill Auditor Setup

To set up the skill-auditor, make sure it is installed inside your local agent workspace.

# Install the skill auditor within your openclaw workspace
openclaw install skill-auditor

# Run a baseline audit to check existing installations
skill-auditor audit

Configure the default tracking window by passing parameters during CLI execution:

# Scan skills with customized parameters (e.g., look back 90 days)
skill-auditor audit --days 90 --min-activity 3

# Run cleanup tasks in dry-run mode to inspect proposed changes
skill-auditor cleanup --dry-run

Skill Auditor Data Schema & Taxonomy

The utility generates structured reports and parses key configurations across several metadata dimensions. Below is the framework used to score and organize Openclaw Skills data:

Dimension Target Area Description Weight
Activity Usage patterns Analyzes total invocations and recent activity to flag zombie skills. 20%
Security Access permissions Flags over-privileged tools with high-risk access (exec, web_fetch, etc.). 20%
Stability System errors Evaluates completeness and historically logged runtime errors. 20%
Maintainability Structural health Scans overall file counts, bundle sizes, and namespace conflicts. 20%
Docs Verification Verifies description clarity, sample prompts, and overall metadata completeness. 20%

All generated cleanup operations output a shell script containing structured commands (uninstall, disable, suspend) mapping directly to verified skill IDs.

Skill Auditor Advanced Features

  • Focus-mode audits: Zoom in specifically on security or usage vectors using specialized CLI flags (--focus security).
  • Intelligent optimization rules: Generates dynamic downgrade recommendations, suggesting precise changes to keep Openclaw Skills tightly aligned with least-privilege principles.
  • Dry-run cleanup scripts: Review generated shell cleanup actions safely before making any permanent file mutations.
  • Visual dashboard export: Export compliance details and health score breakdowns into a clean, interactive HTML dashboard page.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*