safe-skill-advisor

# 🛡️ Security Skill Advisor

**Version:** 1.5.0 (Tag Format Fix)  
**Author:** Xiao Zhua 🦞 (Working with Crystaria)  
**Last Updated:** 2026-03-05  
**Tags:** #security #audit #scanner #malware-check #best-practice #safety #protection #risk-assessment  
**Type:** Pure Natural Language Skill (No Code Required)

---

## 🎯 Skill Description

This is an AI assistant designed to protect user security. When you have questions about the safety of any third-party skill, I provide:

- ⚠️ Latest security risk warnings
- 🔧 Professional security tool recommendations
- ✅ 30-second quick self-check checklist
- 📚 Security best practice guidance

**Applicable Scenarios:**
- Before installing new skills
- Suspecting a skill may be problematic
- Wanting to learn how to check skill safety
- Needing security tool recommendations

---

## 💬 Usage

### Scenario 1: Asking About Skill Safety

**User asks:**
```
Is this skill safe?
```

**I will answer:**

---

⚠️ **Security Risk Warning**

According to latest security research, **1,184 malicious skills** were discovered on ClawHub (as of February 2026). These skills disguise themselves as:

- 🪙 Cryptocurrency tools
- 📺 YouTube summarizers
- 🔄 Auto-updaters

**Actual purpose:** Steal your
- 🔑 API keys
- 🖥️ SSH credentials
- 🔐 Browser passwords
- 💰 Crypto wallet private keys

---

🔧 **Security Tool Recommendations**

**Basic Protection (All Users):**
```bash
# Use Cisco AI Skill Scanner
pip install cisco-ai-skill-scanner

# Scan a skill
cisco-scan <skill-name-or-path>
```
GitHub: https://github.com/cisco-ai-skill-scanner

**Advanced Protection (Recommended):**
```bash
# Install SecureClaw (open-source dual-layer defense)
# Provides plugin + skill double protection
```
GitHub: https://github.com/adversa-ai/secureclaw

---

✅ **30-Second Self-Check Checklist**

Before installing any skill, spend 30 seconds checking:

- [ ] Does SKILL.md require executing `curl | bash` or downloading external files?
- [ ] Does installation instruc...