An automated AI agent that audits source code for security vulnerabilities, quality issues, and gas optimizations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install code-auditor
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install code-auditor using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Code Auditor?
Code Auditor is a specialized tool within the Openclaw Skills ecosystem designed to perform deep analysis on source code. It allows developers to provide a GitHub repository URL or raw code snippets to receive a comprehensive report on security posture, coding standards, and efficiency. By leveraging advanced LLMs, it identifies critical vulnerabilities and provides actionable fixes.
This skill streamlines the code review process by automating the discovery of hardcoded secrets, injection vulnerabilities, and suboptimal patterns. Whether you are prepping for a production launch or evaluating a third-party library, integrating these Openclaw Skills into your workflow ensures higher code integrity and reduced risk.
Code Auditor Use Cases
- Security reviews prior to production deployment to catch vulnerabilities early.
- Evaluating the quality and safety of third-party dependencies or open-source libraries.
- Solidity smart contract audits focused specifically on gas optimization.
- Continuous code quality assessments for growing repositories.
- Identifying hardcoded credentials or secrets in legacy codebases.
How Code Auditor Works
- The user provides a target GitHub repository URL or a block of raw source code to the agent.
- Optionally, a focus area is defined: security, quality, or gas optimization.
- The Openclaw Skills orchestration layer routes the request to the AI-powered auditor.
- The agent parses the code, identifies issues, and assigns severity levels based on impact.
- A JSON response is returned containing a health score, detailed findings, and a summary of necessary remediations.
Code Auditor Setup
To use this skill, ensure you have an active spend token from AIProx. Configuration involves setting your environment variable for authentication.
export AIPROX_SPEND_TOKEN="your_token_here"
You can then make requests via a standard curl command:
curl -X POST https://aiprox.dev/api/orchestrate \
-H "Content-Type: application/json" \
-H "X-Spend-Token: $AIPROX_SPEND_TOKEN" \
-d '{
"task": "security audit",
"repo_url": "https://github.com/user/repo",
"focus": "security"
}'
Code Auditor Data Schema & Taxonomy
Code Auditor generates a structured report reflecting the health of the repository. The data is organized into clear metrics and actionable objects.
| Field | Description |
|---|---|
| score | A numerical value (0-100) representing overall code health. |
| findings | An array of objects including severity, file path, line number, and fix. |
| severity_counts | A summary tally of critical, high, medium, and low issues. |
| summary | A human-readable narrative explaining the primary concerns found. |
Code Auditor Advanced Features
- Multi-focus audits allowing simultaneous checks for security, quality, and gas efficiency.
- Support for both public GitHub repository URLs and direct raw code injection for rapid testing.
- Detailed remediation guidance for every identified finding to speed up developer fix cycles.
- Orchestration-ready architecture, enabling integration into automated CI/CD pipelines as part of your Openclaw Skills suite.
- Severity-based categorization to help teams prioritize critical vulnerabilities during urgent reviews.
SKILL.md
Loading
Related Openclaw Skills
ClawOpen Resource Navigator
A comprehensive community-maintained navigation hub for discovering official documentation, developer tools, and Openclaw Skills.
China Stock Analysis
A professional-grade financial analysis skill for tracking Chinese A-shares, Hong Kong stocks, and US tickers with structured investment recommendations.
Git Ops
A professional-grade skill for AI agents to execute local git operations following industry-standard project management workflows.
Home Todo
An automated task management skill that captures home-related errands from any channel and reminds you the moment you access your dashboard.
Claude
Claude is a long-context reasoning optimizer designed to transform complex commercial and legal documents into actionable insights and sharper decisions.
NSFW Image Generation
A professional-grade AI image generation skill for mature creative projects with relaxed content policies and high-performance models.
Featured*
