@clawhub/skill-scan
Security scanner for OpenClaw skill packages. Scans skills for malicious code, evasion techniques, prompt injection, and misaligned behavior BEFORE installation. Use to audit any skill from ClawHub
Install
Add @clawhub/skill-scan to Claude Code with the PolySkill CLI: polyskill add @clawhub/skill-scan
Instructions
# Skill-Scan — Security Auditor for Agent Skills Multi-layered security scanner for OpenClaw skill packages. Detects malicious code, evasion techniques, prompt injection, and misaligned behavior through static analysis and optional LLM-powered deep inspection. Run this BEFORE installing or enabling any untrusted skill. ## Features - **6 analysis layers** — pattern matching, AST/evasion, prompt injection, LLM deep analysis, alignment verification, meta-analysis - **60+ detection rules** — execution threats, credential theft, data exfiltration, obfuscation, behavioral signatures - **Context-awa…
Keywords: malware, scanning, audit, trust