An advanced security API that analyzes uploaded files to identify potential threats, malware, and suspicious characteristics through automated heuristics.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install suspicious-file-scanner
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install suspicious-file-scanner using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Suspicious File Scanner?
The Suspicious File Scanner is a high-performance security tool designed to identify malicious or suspicious characteristics in files before they enter your system. By leveraging advanced threat detection heuristics, this Openclaw Skills integration helps organizations minimize the risk of ransomware, malware infections, and file-based attacks. It is specifically built for developers and security teams who need a rapid, automated assessment of file integrity.
This skill processes files through multiple detection layers, identifying signs of obfuscation, packed executables, and suspicious API imports. By providing a clear threat level and actionable recommendations, it empowers users to make informed decisions about whether to allow, review, or quarantine files within their digital ecosystem.
Suspicious File Scanner Use Cases
- Scanning user-uploaded files on web portals to prevent server-side compromises.
- Automating attachment screening in email gateways to block malicious payloads.
- Integrating file validation into automated DevOps pipelines to ensure artifact safety.
- Enhancing endpoint security by pre-scanning files handled by automated agents and scripts.
How Suspicious File Scanner Works
- The user or agent uploads a file to the scanning endpoint using a multipart/form-data request.
- The file is analyzed against multiple security heuristics to identify known indicators of compromise (IoCs).
- The system evaluates file metadata, packing status, and internal imports to determine threat confidence.
- A detailed JSON response is generated, categorizing the threat level from low to critical.
- The skill provides a final recommendation (allow, review, or quarantine) to guide automated or manual workflows.
Suspicious File Scanner Setup
To integrate this functionality into your environment, use the provided API endpoint. You can test the scanner using the following command:
curl -X POST \
-F "file=@/path/to/sample.exe" \
https://api.mkkpro.com/security/suspicious-file-scanner/scan-file
Ensure your application is configured to handle the JSON response provided by this Openclaw Skills component to automate file handling logic.
Suspicious File Scanner Data Schema & Taxonomy
The scanner returns a structured data object containing the following technical metadata:
| Property | Type | Description |
|---|---|---|
| filename | string | The name of the file analyzed. |
| threat_level | string | Severity: low, medium, high, or critical. |
| threat_indicators | array | Specific characteristics detected (e.g., packed executables). |
| confidence | number | The probability score (0.0-1.0) of the detected threat. |
| recommendation | string | The suggested action: allow, review, or quarantine. |
Suspicious File Scanner Advanced Features
- Heuristic identification of packed or obfuscated files designed to evade signature-based detection.
- Behavioral profiling via suspicious Windows API import analysis.
- Detailed threat indicator breakdown with individual confidence scores for granular reporting.
- Scalable API architecture suitable for high-volume enterprise Openclaw Skills implementations.
SKILL.md
Loading
Related Openclaw Skills
Free Dev Playgrounds
A specialized skill that provides instant, disposable browser-based developer environments and sandboxes for testing code, tools, and infrastructure.
PRD FullStack
A comprehensive 14-chapter product requirements workflow designed to bridge the gap between initial ideas and professional, execution-ready documentation.
Amazon Trademark & IP Risk Checker
A comprehensive screening tool to identify trademark conflicts, patent risks, and intellectual property violations for Amazon sellers.
WeChat Articles Search & Reader
A comprehensive tool for searching WeChat Official Account articles and extracting full-text content with high stability.
Hotspot Aggregator
An all-in-one monitoring tool to aggregate trending topics from major Chinese social platforms and generate automated daily reports.
E-Commerce PPC Strategy Planner
A comprehensive cross-platform advertising strategist that calculates ROAS targets, allocates budgets, and generates creative briefs for ecommerce brands.
Featured*
