{"id":"4528bfd6-a3d4-4908-8683-6c86aa33bdda","slug":"steffano198-skill-security-scanner","name":"skill-security-scanner","description":"Skill Security Scanner","canonicalUrl":"https://www.xpersona.co/skill/steffano198-skill-security-scanner","sourceUrl":"https://github.com/Steffano198/skill-security-scanner","homepage":null,"source":"GITHUB_OPENCLEW","vendor":{"slug":"steffano198","label":"Steffano198","url":"https://github.com/Steffano198/skill-security-scanner"},"protocols":["OPENCLEW"],"capabilities":["openclaw","a","all","result","scan","results"],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":null,"freshnessAt":"2026-02-25T01:47:48.661Z","freshnessLabel":"Feb 25, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Feb 25, 2026"},{"label":"Vendor","value":"Steffano198"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"Unpublished"}],"factsPreview":[{"factKey":"docs_crawl","category":"integration","label":"Crawlable docs","value":"6 indexed pages on the official domain","href":"https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar","sourceUrl":"https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fopenclaw%2Fskills%2Ftree%2Fmain%2Fskills%2Fasleep123%2Fcaldav-calendar","sourceType":"search_document","confidence":"medium","observedAt":"2026-04-15T05:03:46.393Z","isPublic":true},{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Steffano198","href":"https://github.com/Steffano198/skill-security-scanner","sourceUrl":"https://github.com/Steffano198/skill-security-scanner","sourceType":"profile","confidence":"medium","observedAt":"2026-02-25T01:47:49.861Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/steffano198-skill-security-scanner/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/steffano198-skill-security-scanner/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-02-25T01:47:49.861Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/steffano198-skill-security-scanner/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/steffano198-skill-security-scanner/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["Trust evidence available"],"agentCard":{"name":"skill-security-scanner","description":"Skill Security Scanner","source":"GITHUB_OPENCLEW","sourceId":"github:1159541304","repository":"https://github.com/Steffano198/skill-security-scanner","documentation":"https://www.xpersona.co/skill/steffano198-skill-security-scanner/agent/steffano198-skill-security-scanner","protocols":["OPENCLEW"],"capabilities":["openclaw","a","all","result","scan","results"],"languages":["typescript"],"install":{"command":"git clone https://github.com/Steffano198/skill-security-scanner.git","ecosystem":"git"},"examples":[{"kind":"example","language":"bash","snippet":"# Network calls to unknown domains\ngrep -E \"(curl|wget|http|https).*\\.com\" SKILL.md\ngrep -E \"fetch\\(|axios\\(\" SKILL.md\n\n# File system access beyond declared scope\ngrep -E \"rm -rf|dd |mkfs\" SKILL.md\n\n# Credential access\ngrep -E \"password|secret|token|key\" SKILL.md\n\n# Execution of downloaded code\ngrep -E \"eval\\(|exec\\(|system\\(\" SKILL.md\n\n# Base64 encoded commands\ngrep -E \"base64|-enc|-encode\" SKILL.md"},{"kind":"example","language":"text","snippet":"🔍 Skill: <skill-name>\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n📊 Trust Score: <score>/100 (<risk-level>)\n\n📋 Permissions Requested:\n   • bins: curl, jq\n   • env: OPENWEATHER_API_KEY\n\n⚠️ Issues Found:\n   1. [MEDIUM] Requests network access but no clear purpose\n   2. [LOW] No recent updates (6+ months)\n\n✅ Positive Signs:\n   • Official OpenClaw skill\n   • Clear documentation"}]}}