{"id":"f5351c72-9076-448e-adc2-cee758f55a4b","entityType":"agent","slug":"clawhub-skills-aiwithabidi-skill-auditor-v2","name":"skill-auditor","canonicalUrl":"https://www.xpersona.co/agent/clawhub-skills-aiwithabidi-skill-auditor-v2","canonicalPath":"/agent/clawhub-skills-aiwithabidi-skill-auditor-v2","generatedAt":"2026-10-09T21:44:24.428Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"description":"Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skill. Triggers: audit skill, check security, scan skill, is this skill safe, security review, quarantine. --- name: skill-auditor version: 2.0.0 description: > Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skil","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. Last updated 4/15/2026.","installCommand":"clawhub skill install skills:aiwithabidi:skill-auditor-v2","sourceUrl":"https://github.com/openclaw/skills/tree/main/skills/aiwithabidi/skill-auditor-v2","homepage":null,"primaryLinks":[{"label":"View on ClawHub","url":"https://github.com/openclaw/skills/tree/main/skills/aiwithabidi/skill-auditor-v2","kind":"source"}],"safetyScore":84,"overallRank":62,"popularityScore":50,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration be"},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[{"label":"categories","status":"self-declared"},{"label":"decoded","status":"self-declared"}],"verifiedCount":0,"selfDeclaredCount":3,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"},{"key":"categories","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"decoded","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile capability:categories|supported|profile capability:decoded|supported|profile"}},"adoption":{"evidence":{"source":"no-adoption-signals","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"No source adoption metrics were available."},"stars":null,"forks":null,"downloads":null,"packageName":null,"latestVersion":null,"tractionLabel":null},"release":{"evidence":{"source":"agent-index","verified":false,"confidence":"medium","updatedAt":"2026-02-25T05:57:32.913Z","emptyReason":null},"lastUpdatedAt":"2026-04-15T00:45:39.800Z","lastCrawledAt":"2026-02-25T05:57:32.913Z","lastIndexedAt":null,"nextCrawlAt":"2026-02-26T05:57:32.913Z","lastVerifiedAt":null,"highlights":[]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install skills:aiwithabidi:skill-auditor-v2","setupComplexity":"low","setupSteps":["Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-09T21:44:24.428Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-aiwithabidi-skill-auditor-v2/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"high","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"readme":"---\nname: skill-auditor\nversion: 2.0.0\ndescription: >\n  Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads,\n  prompt injection, social engineering, typosquatting, and data exfiltration before\n  installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex\n  deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before\n  installing any third-party skill. Triggers: audit skill, check security, scan skill,\n  is this skill safe, security review, quarantine.\nlicense: MIT\ncompatibility:\n  openclaw: \">=0.10\"\nmetadata:\n  openclaw:\n    requires:\n      bins: [\"python3\"]\n---\n\n# Skill Auditor v2.0 🔍🛡️\n\nComprehensive security scanner for OpenClaw/ClawHub skills. Merges static analysis, deobfuscation, and threat intelligence into a single Python tool.\n\n## When to Use\n\n- Before installing **any** third-party skill from ClawHub\n- When reviewing skill updates for security regressions\n- To audit your own skills before publishing\n- When someone asks: \"is this skill safe?\", \"audit this\", \"check security\"\n\n## Quick Start\n\n### Audit a local skill directory\n```bash\npython3 {baseDir}/scripts/audit_skill.py /path/to/skill --human\n```\n\n### Audit a ClawHub skill by slug\n```bash\npython3 {baseDir}/scripts/audit_skill.py --slug skill-name --human\n```\n\n### Quarantine workflow (audit + prompt to install)\n```bash\nbash {baseDir}/scripts/quarantine.sh /path/to/skill\nbash {baseDir}/scripts/quarantine.sh --slug skill-name\n```\n\n### JSON output for programmatic use\n```bash\npython3 {baseDir}/scripts/audit_skill.py /path/to/skill --json\n```\n\n## Scoring System\n\n| Score | Level | Action |\n|-------|-------|--------|\n| 0–20 | ✅ SAFE | Auto-install OK |\n| 21–40 | 🟢 LOW RISK | Proceed with caution |\n| 41–60 | 🟡 MEDIUM RISK | Manual review required |\n| 61–80 | 🟠 HIGH RISK | Expert review needed |\n| 81–100 | 🔴 CRITICAL | Do NOT install |\n\nExit codes: `0` = safe (≤20), `1` = review (21–60), `2` = dangerous (>60)\n\n## Detection Layers\n\n### Layer 1: Static Pattern Analysis\n- 10+ scan categories with regex patterns\n- Shell execution, network calls, env access, filesystem escape\n- Prompt injection, data exfiltration, crypto wallet access\n- Dynamic imports, browser credential theft, fake prerequisites\n\n### Layer 2: Deobfuscation\n- Base64 string extraction and decode → re-scan decoded content\n- Hex escape sequence decode → re-scan\n- Detects hidden commands, C2 IPs in encoded payloads\n\n### Layer 3: Threat Intelligence\n- IoC database: known malicious IPs, domains\n- Social engineering detection: urgency, false authority, fear tactics\n- MITRE ATT&CK ID mapping on every finding\n- Whitelist system reduces score for safe binaries/domains\n\n### Additional Checks\n- SHA256 file inventory for integrity verification\n- Typosquat detection (Levenshtein distance on package names)\n- Zero-width character detection in SKILL.md\n- Comment-context severity reduction (findings in comments scored lower)\n- Permission scope analysis (what tools does the skill request?)\n\n## IoC Database\n\nStructured threat data in `references/ioc-database.json`. Update when new threats emerge. The scanner auto-loads this file at runtime.\n\n## References\n\n- `references/ioc-database.json` — Structured IoC data (IPs, domains, patterns)\n- `references/known-patterns.md` — Human-readable threat documentation\n- `references/prompt-injection-patterns.md` — Prompt injection pattern reference\n\n## Credits\n\nBuilt by [M. Abidi](https://www.linkedin.com/in/mohammad-ali-abidi) | [agxntsix.ai](https://www.agxntsix.ai)\n[YouTube](https://youtube.com/@aiwithabidi) | [GitHub](https://github.com/aiwithabidi)\nPart of the **AgxntSix Skill Suite** for OpenClaw agents.\n\n📅 **Need help setting up OpenClaw for your business?** [Book a free consultation](https://cal.com/agxntsix/abidi-openclaw)\n\nFork of [skill-auditor-pro](https://clawhub.ai/skills/skill-auditor-pro) by sypsyp97, merged with [skill-security-auditor](https://clawhub.ai/skills/skill-security-auditor) by akm626.\n","readmeExcerpt":"--- name: skill-auditor version: 2.0.0 description: > Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skil","codeSnippets":[],"executableExamples":[{"language":"bash","snippet":"python3 {baseDir}/scripts/audit_skill.py /path/to/skill --human"},{"language":"bash","snippet":"python3 {baseDir}/scripts/audit_skill.py --slug skill-name --human"},{"language":"bash","snippet":"bash {baseDir}/scripts/quarantine.sh /path/to/skill\nbash {baseDir}/scripts/quarantine.sh --slug skill-name"},{"language":"bash","snippet":"python3 {baseDir}/scripts/audit_skill.py /path/to/skill --json"}],"parameters":{},"dependencies":[],"permissions":[],"extractedFiles":[],"languages":["typescript"],"docsSourceLabel":"CLAWHUB","editorialOverview":"Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skill. Triggers: audit skill, check security, scan skill, is this skill safe, security review, quarantine. --- name: skill-auditor version: 2.0.0 description: > Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skil","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":414,"uniquenessScore":63,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-09T21:44:24.428Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}