A security-first utility to audit and verify the safety of Openclaw Skills via the Gen Digital scan API.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install skillscanner
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install skillscanner using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is SkillScanner?
SkillScanner is a specialized tool designed to provide a layer of trust and security for developers and agents using Openclaw Skills. By interfacing with the Gen Digital scan API, it allows for the real-time vetting of skills hosted on ClawHub. The primary objective is to verify that a skill is safe to run in a local environment, protecting users from common risks like data exfiltration, system compromise, or supply chain attacks.
In the rapidly evolving ecosystem of AI agents, SkillScanner acts as a gatekeeper. It ensures that any of the Openclaw Skills being requested for a task meet strict security criteria. If a skill has not yet been cleared or shows signs of malicious behavior, the tool provides immediate feedback, allowing the agent or the developer to make informed decisions about whether to proceed.
SkillScanner Use Cases
- Verifying the safety of newly discovered Openclaw Skills before installation.
- Automating security checks for AI agents that frequently download and execute third-party tools.
- Auditing an entire library of Openclaw Skills to ensure they haven't been flagged as malicious.
- Checking the manual review status of skills that are currently in a pending state.
How SkillScanner Works
- The user identifies the specific URL of the Openclaw Skills they wish to verify.
- SkillScanner transmits a JSON payload containing the skill URL to the Gen Digital scan lookup endpoint.
- The backend system retrieves the latest audit report for that specific skill.
- The tool receives a response containing a status (e.g., done) and a severity level (e.g., SAFE).
- Based on the API verdict, the user is notified if it is safe to proceed or if the skill should be avoided due to security risks.
SkillScanner Setup
To begin vetting Openclaw Skills, you can use a simple curl command to interface with the scan API. No complex local installation is required, as the logic resides in the cloud-based audit system.
curl --request POST --url "https://ai.gendigital.com/api/scan/lookup" \
--header "Content-Type: application/json" \
--data '{"skillUrl":"https://clawhub.ai/author/skill-name"}'
SkillScanner Data Schema & Taxonomy
SkillScanner processes metadata from Openclaw Skills and returns a structured response based on the following schema:
| Property | Description |
|---|---|
| skillUrl | The full path to the skill being scanned on ClawHub. |
| status | Indicates if the scan is 'done' or 'analysis_pending'. |
| severity | The safety rating, where SAFE is the only recommended state for execution. |
For best results when managing multiple Openclaw Skills, log these outputs to track the safety history of your local toolset.
SkillScanner Advanced Features
- Agentic Safety Enforcement: Automatically block execution if Openclaw Skills return any severity level other than SAFE.
- Real-time Analysis Monitoring: Detect skills that are currently under human review to avoid premature deployment.
- Comprehensive Risk Identification: Identifies a wide range of threats including unauthorized filesystem access and environment variable exfiltration.
- Multi-Skill Batching: While the primary API is 1:1, scripts can be wrapped around SkillScanner to audit entire sets of Openclaw Skills in a single session.
SKILL.md
Loading
Related Openclaw Skills
Hostinger API Management
A comprehensive automation tool for managing Hostinger VPS instances, DNS records, domains, and Docker deployments via a programmatic interface.
DigitalOcean Management Skill
A comprehensive command-line integration for programmatically managing DigitalOcean cloud infrastructure, including Droplets, DNS, and storage.
Cloudflare
A comprehensive automation interface to manage Cloudflare DNS, security, CDN settings, and serverless Workers via API.
Suno AI Music Creator
A comprehensive automation skill for Suno AI that handles authentication, custom song generation, and audio file management.
LinkedIn Authority Builder
A strategic content engine designed to transform your LinkedIn profile into a professional authority platform that attracts inbound leads and builds industry trust.
LinkedIn Profile Optimizer
A sophisticated AI skill designed to transform LinkedIn profiles into high-conversion assets optimized for both human recruiters and AI-powered search engines.
METADATA
Featured*
