A specialized static analysis tool designed to scan Python-based skills for security vulnerabilities and hardcoded credentials before deployment.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install security-checker
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install security-checker using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Security Checker?
Security Checker is an essential utility for developers building within the ecosystem. It serves as a gatekeeper that performs deep static analysis on Python source code to detect potentially malicious patterns, including unauthorized system access, dangerous execution functions, and exposed sensitive data.
By incorporating this tool into your development cycle for Openclaw Skills, you ensure that your contributions are safe for the community to install and run. It helps bridge the gap between rapid development and security compliance by providing immediate feedback on risky imports like subprocess or os, as well as critical failures like hardcoded API tokens.
Security Checker Use Cases
- Performing a security audit on Python scripts before publishing them as Openclaw Skills.
- Identifying accidentally hardcoded API keys, JWTs, or private credentials in source code.
- Detecting unsafe usage of eval, exec, and system-level commands that could lead to remote code execution.
- Validating that file operations do not include dangerous directory traversal patterns.
How Security Checker Works
- The user executes the scanner against a targeted Python file or a complete directory containing Openclaw Skills.
- The engine performs static analysis to flag dangerous imports such as socket, shutil, or requests that could enable unauthorized data exfiltration.
- It inspects function calls for high-risk execution methods like subprocess.Popen or os.system.
- The tool runs pattern matching to detect hardcoded secrets and authentication tokens.
- A categorized report is produced, flagging items as safe, warnings requiring review, or critical secret detections that must be fixed before publishing.
Security Checker Setup
To start securing your Openclaw Skills, ensure the security_scan.py script is in your path and execute it via the CLI:
# Scan a specific script
security_scan.py scripts/my_script.py
# Scan a full skill directory
security_scan.py /path/to/skill-folder
# Scan a collection of multiple skills
security_scan.py skills/
Security Checker Data Schema & Taxonomy
The Security Checker organizes its findings based on risk categories and provides actionable feedback for each detected issue:
| Check Type | Targeted Risk | Examples |
|---|---|---|
| Dangerous Imports | System/Network access | os, subprocess, socket, urllib |
| Dangerous Functions | Arbitrary code execution | eval(), exec(), os.system() |
| Hardcoded Secrets | Credential leakage | API keys, Auth tokens, Private keys |
| File Operations | Unauthorized file access | Parent traversal (..), absolute paths |
Results are reported with visual indicators: Green (Safe), Yellow (Warning/Review), and Red (Critical Secret Found).
Security Checker Advanced Features
- Support for pre-commit hooks to automate security scanning within your Git workflow.
- Automated pre-publish scripts that verify code safety before calling clawhub publish.
- Contextual warnings that encourage developers to document legitimate but high-risk code patterns for Openclaw Skills.
- Ability to batch-scan entire workspaces to maintain a high security posture across multiple projects.
SKILL.md
Loading
Related Openclaw Skills
Seasonal Planting Guide
A technical command-line tool for generating region-specific planting calendars and managing botanical data based on USDA Hardiness Zones.
Research Assistant
A sophisticated knowledge management tool for agents to structure, store, and retrieve research notes across multiple sessions.
Plant Tracker
A sophisticated garden management utility for Openclaw Skills that tracks plant health, care logs, and harvest data through a structured CLI interface.
Pest & Disease Tracker
A comprehensive tracking and recommendation system for managing garden pests and diseases through data-driven treatment logs.
Task Runner
A persistent task management system designed to track projects and todo lists across multiple AI agent sessions.
URL Fetcher
A lightweight, zero-dependency Python tool for fetching web content and converting HTML to markdown securely.
Featured*
