A specialized safety inspector and health tool designed to audit newly installed skills before they are activated in your system.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install claw-skill-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install claw-skill-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Skill-Audit?
Skill-Audit serves as a critical security layer for the Openclaw ecosystem, providing an automated way to inspect skills for structural integrity and potential vulnerabilities. By acting as a gatekeeper, it ensures that every addition to your AI agent's capabilities meets strict safety standards before it is ever enabled.
This utility is essential for developers and power users who frequently download new modules. It mitigates the risk of running malicious scripts or broken configurations, maintaining the overall stability and security of your Openclaw Skills environment.
Skill-Audit Use Cases
- Validating a freshly downloaded skill from ClawHub before first-time activation.
- Conducting routine maintenance checks on existing skill directories to ensure ongoing health.
- Debugging malfunctioning skills by identifying broken references or syntax errors.
- Automated security scanning as part of a CI/CD pipeline for AI agent skill development.
How Skill-Audit Works
- The user provides the file path of a newly installed or existing skill to the utility.
- The tool performs a Structure Validation, checking for mandatory documentation and internal link integrity.
- A Security Scan is executed to detect hardcoded secrets, untrusted network calls, and unsafe file permissions.
- A Health Check validates syntax and ensures there are no circular imports or accessibility issues.
- The system generates a report categorized by PASS, WARN, FAIL, or INFO statuses.
Skill-Audit Setup
To install and begin using the audit tool for your Openclaw Skills, run the following command in your terminal:
# Audit a specific skill by providing its directory path
skill-audit ~/.openclaw/skills/your-target-skill
Ensure you have read permissions for the target directory to allow the inspector to complete the scan.
Skill-Audit Data Schema & Taxonomy
The tool analyzes the skill structure and outputs a standardized report based on the following taxonomy:
| Level | Description |
|---|---|
| PASS | Skill meets all security and structural requirements. |
| WARN | Minor non-blocking issues identified (e.g., missing optional metadata). |
| FAIL | Critical issues detected (e.g., security risks or broken syntax). |
| INFO | General notes regarding skill configuration or best practices. |
Skill-Audit Advanced Features
- Integrated security scanning for hardcoded API keys and credentials.
- Automatic detection of suspicious external network calls (untrusted URLs).
- File system permission auditing to prevent world-writable script execution.
- Seamless workflow integration when combined with ClawHub for an install-audit-enable lifecycle.
SKILL.md
Loading
Related Openclaw Skills
Smart Chatbot Builder
A comprehensive AI framework for building, deploying, and managing intelligent chatbots with deep knowledge base integration and multi-turn conversation logic.
Trading Desk
An institutional-grade options trading system for AI agents featuring 10 strategy templates, an interactive strategy router, and comprehensive portfolio management tools.
Meet Task Platform Skill
The Meet skill enables users and AI agents to participate in a task-based economy by publishing, claiming, and delivering work for rewards.
Meeting Assistant
An intelligent productivity tool designed to transform raw meeting notes and audio into structured summaries, actionable tasks, and calendar schedules.
SABSA Security Architecture Assessment
A professional enterprise security architecture maturity analysis platform based on the industry-standard Sherwood Applied Business Security Architecture (SABSA) framework.
Selection Agent
A comprehensive multi-channel product selection agent for keyword research, SEO analysis, and TrendPlus data integration.
Featured*
