A specialized security tool that automatically audits Openclaw Skills ZIP files for suspicious patterns and risk levels.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install skill-audit-guardian
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install skill-audit-guardian using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Skill Audit Guardian?
Skill Audit Guardian is a critical security utility designed to protect developers and system administrators from malicious or poorly written code. It serves as a gateway for Openclaw Skills, scanning compressed ZIP archives before they are installed in a production environment. By leveraging heuristic scanning and automated sorting, it ensures that your agent ecosystem remains secure and compliant.
This tool is particularly valuable for teams managing large libraries of Openclaw Skills, providing a consistent and automated way to vet third-party contributions. It transforms the manual task of code review into a streamlined workflow, classifying every package based on its potential risk profile and providing clear, actionable insights through a generated security dashboard.
Skill Audit Guardian Use Cases
- Automating the vetting process for new Openclaw Skills downloaded from public repositories.
- Continuous monitoring of specific drop folders to identify and sort incoming security threats.
- Generating comprehensive security reports for audit compliance and team reviews.
- Identifying high-risk code patterns in legacy Openclaw Skills before migration or updates.
How Skill Audit Guardian Works
- The system utilizes a watcher script to monitor a designated directory for incoming ZIP files containing Openclaw Skills.
- Upon detection, a one-shot auditor unpacks the archive and executes a series of heuristic scans using ripgrep to identify suspicious or dangerous code patterns.
- Based on the scan results, the skill is assigned a risk score and classified as SAFE, CAUTION, or REMOVE.
- The utility automatically moves the ZIP file into a risk-stratified subfolder for organized management.
- A Python script generates an HTML-based security dashboard on the user's desktop, detailing the specific reasoning for every flag found within the Openclaw Skills.
Skill Audit Guardian Setup
Ensure your system has the required dependencies: bash, python3, unzip, and rg (ripgrep).
To perform a single audit on a ZIP file:
bash scripts/skill-zip-audit.sh ~/Desktop/skill-drop/example.zip
To enable continuous monitoring and automatic sorting of Openclaw Skills:
bash scripts/skill-zip-watch.sh ~/Desktop/skill-drop
Skill Audit Guardian Data Schema & Taxonomy
The skill organizes audit results into a specific folder hierarchy and generates a metadata-rich dashboard:
| Directory/File | Description |
|---|---|
~/Desktop/skill-drop/safe |
Verified Openclaw Skills with no high-risk flags. |
~/Desktop/skill-drop/caution |
Packages containing suspicious patterns requiring review. |
~/Desktop/skill-drop/remove |
High-risk Openclaw Skills identified as potentially malicious. |
~/Desktop/skill-drop/failed |
Files that could not be properly unzipped or parsed. |
~/Desktop/skill-audit-pro.html |
A security dashboard providing plain-English reasoning for each flag. |
Skill Audit Guardian Advanced Features
- Continuous background monitoring of directories for real-time security scanning.
- Risk-stratified auto-sorting to prevent the accidental execution of unsafe Openclaw Skills.
- Deep inspection of code using high-performance regex patterns via ripgrep.
- Plain-English dashboard generation that translates technical flags into understandable security risks.
- Support for multi-stage auditing, from one-shot CLI commands to automated background watchers.
SKILL.md
Loading
Related Openclaw Skills
Antigravity Image Generation
A high-performance image generation skill that utilizes the Gemini 3 Pro model via internal Google Antigravity endpoints.
Workspace Maintenance
Maintain a clean and discoverable documentation environment through non-destructive maintenance cycles and systematic archiving.
Meeting Prep
Automate meeting preparation and daily developer status reports by syncing Google Calendar schedules with GitHub commit history.
AI Writing Humanizer
A specialized utility that strips AI-generated writing patterns and stock phrases from text to ensure a natural, human-sounding tone.
Protico Agent Skill
A bridge for AI agents to engage in real-world human discussions and gather sentiment across a network of partner websites via the Protico community widget.
ClawBot Network
A distributed communication layer that connects multiple OpenClaw instances across different devices into a unified, collaborative agent network.
Featured*
