{"id":"defb7909-c513-406f-a8f4-d5b7809a7421","slug":"clawhub-skills-adainthelab-skulk-skill-scanner","name":"skulk-skill-scanner","description":"Scan OpenClaw skill folders for security red flags before installing or publishing. Detects data exfiltration, credential theft, prompt injection, destructive commands, obfuscation, privilege escalation, and supply chain risks. Use when: evaluating a skill from ClawHub before install, auditing your own skills before publishing, or reviewing any SKILL.md for safety. NOT for: general code review or vulnerability scanning of non-skill codebases.","canonicalUrl":"https://www.xpersona.co/agent/clawhub-skills-adainthelab-skulk-skill-scanner","sourceUrl":"https://github.com/openclaw/skills/tree/main/skills/adainthelab/skulk-skill-scanner","homepage":null,"source":"CLAWHUB","vendor":{"slug":"openclaw","label":"Openclaw","url":"https://github.com/openclaw/skills/tree/main/skills/adainthelab/skulk-skill-scanner"},"protocols":["OPENCLEW"],"capabilities":["a","your","noise"],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":null,"freshnessAt":"2026-02-25T05:55:39.483Z","freshnessLabel":"Feb 25, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Feb 25, 2026"},{"label":"Vendor","value":"Openclaw"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"Unpublished"}],"factsPreview":[{"factKey":"docs_crawl","category":"integration","label":"Crawlable docs","value":"6 indexed pages on the official domain","href":"https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar","sourceUrl":"https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar","sourceType":"search_document","confidence":"medium","observedAt":"2026-04-15T05:03:46.393Z","isPublic":true},{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Openclaw","href":"https://github.com/openclaw/skills/tree/main/skills/adainthelab/skulk-skill-scanner","sourceUrl":"https://github.com/openclaw/skills/tree/main/skills/adainthelab/skulk-skill-scanner","sourceType":"profile","confidence":"medium","observedAt":"2026-04-15T00:45:39.800Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adainthelab-skulk-skill-scanner/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adainthelab-skulk-skill-scanner/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-04-15T00:45:39.800Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adainthelab-skulk-skill-scanner/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-adainthelab-skulk-skill-scanner/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["Trust evidence available"],"agentCard":{"name":"skulk-skill-scanner","description":"Scan OpenClaw skill folders for security red flags before installing or publishing. Detects data exfiltration, credential theft, prompt injection, destructive commands, obfuscation, privilege escalation, and supply chain risks. Use when: evaluating a skill from ClawHub before install, auditing your own skills before publishing, or reviewing any SKILL.md for safety. NOT for: general code review or vulnerability scanning of non-skill codebases.","source":"CLAWHUB","sourceId":"clawhub:skills:adainthelab:skulk-skill-scanner","repository":"https://github.com/openclaw/skills/tree/main/skills/adainthelab/skulk-skill-scanner","documentation":"https://www.xpersona.co/agent/clawhub-skills-adainthelab-skulk-skill-scanner","protocols":["OPENCLEW"],"capabilities":["a","your","noise"],"languages":["typescript"],"examples":[{"kind":"example","language":"bash","snippet":"node scripts/scanner.js <path-to-skill> [--verbose] [--json] [--summary] [--ignore <path>] [--include-self]"},{"kind":"example","language":"bash","snippet":"# Scan a downloaded skill folder before enabling it\nclawhub inspect some-skill\nnode scripts/scanner.js ./skills/some-skill --verbose\n\n# Scan your own skill before publishing\nnode scripts/scanner.js ./skills/my-skill\n\n# JSON output for automation\nnode scripts/scanner.js ./skills/my-skill --json\n\n# One-line summary output for heartbeat checks\nnode scripts/scanner.js ./skills/my-skill --summary\n\n# Include scanner internals (off by default to reduce self-scan noise)\nnode scripts/scanner.js ./skills/skulk-skill-scanner --include-self"}]}}