OpenClaw

agent-audit-scanner

Security scanner for OpenClaw skills. Detects prompt injection, credential leaks, unsafe code execution, MCP misconfigurations, privilege escalation, obfuscated shell commands, and social engineering patterns. Covers all 10 OWASP Agentic AI threat categories with 49+ detection rules.

headyzhang0 来源安装数☆ 0 仓库 Starsv0.1.0

查看来源 ↗安装与使用 SKILL.md ↗

安装与使用

请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。

SkillHub CLI

skillhub install headyzhang/agent-audit-scanner

打开来源仓库，查看说明和兼容环境后，按来源提供的命令或步骤安装。

将来源链接提供给你的 Agent，让它先读取说明、核对依赖，并向你说明将执行的安装步骤。

查看来源 ↗使用指南

技能说明

Agent Audit Scanner — Security Scanning for OpenClaw Skills

You are a security auditor. Use this skill to scan OpenClaw skills for vulnerabilities BEFORE the user enables them.

When to Trigger

New skill installed — scan before confirming it's ready.
User asks about safety — "is this skill safe?", "audit this skill", etc.
/audit command — /audit (all) or /audit <skill-name>.
Bulk audit — "audit all skills", "check my skills".

Setup (first-time only)

pip install agent-audit && agent-audit --version

If installation fails, tell the user: "Run pip install agent-audit in your terminal, then ask me again."

How to Scan a Single Skill

Run the scan script bundled with this skill:

python3 {baseDir}/scripts/scan-skill.py "<path-to-skill-directory>"

Or use agent-audit directly:

agent-audit scan "<path-to-skill-directory>" --format json

Common skill locations:

Workspace skills: ~/.openclaw/workspace/skills/<skill-name>/
Managed skills: ~/.openclaw/skills/<skill-name>/

How to Scan All Skills

python3 {baseDir}/scripts/scan-all-skills.py

This discovers and scans every skill in ~/.openclaw/workspace/skills/ and ~/.openclaw/skills/, producing a consolidated report with per-skill verdicts.

How to Audit OpenClaw Config

python3 {baseDir}/scripts/check-config.py

Checks ~/.openclaw/openclaw.json and .mcp.json for dangerous settings: exposed gateway binds, open DM policies, hardcoded tokens, broad MCP filesystem access, missing sandbox config.

Interpreting Results

Findings have three severity tiers:

BLOCK (confidence >= 0.92): DO NOT enable. Warn the user. Covers hardcoded credentials, unsandboxed code exec, obfuscated shell commands, critical file modification.
WARN (0.60-0.91): Inform the user and let them decide. Covers suspicious network requests, auto-invocation flags, broad filesystem access.
INFO (0.30-0.59): Mentio...

来源信息

Source: github
Repository: openclaw/skills
Path: skills/headyzhang/agent-audit-scanner
Version: 0.1.0
Commit: 33188286bf386f95e9ff07628be51cde553fa49e
分类来源: rules
状态: active
可见性: public

这些信息来自收录时的来源分析，可能滞后；使用前请核对最新来源文件。

来源内容

SKILL.md

# Agent Audit Scanner — Security Scanning for OpenClaw Skills

You are a security auditor. Use this skill to scan OpenClaw skills for vulnerabilities BEFORE the user enables them.

## When to Trigger

1. **New skill installed** — scan before confirming it's ready.
2. **User asks about safety** — "is this skill safe?", "audit this skill", etc.
3. **`/audit` command** — `/audit` (all) or `/audit <skill-name>`.
4. **Bulk audit** — "audit all skills", "check my skills".

## Setup (first-time only)

```bash
pip install agent-audit && agent-audit --version
```

If installation fails, tell the user: "Run `pip install agent-audit` in your terminal, then ask me again."

## How to Scan a Single Skill

Run the scan script bundled with this skill:

```bash
python3 {baseDir}/scripts/scan-skill.py "<path-to-skill-directory>"
```

Or use agent-audit directly:

```bash
agent-audit scan "<path-to-skill-directory>" --format json
```

Common skill locations:
- Workspace skills: `~/.openclaw/workspace/skills/<skill-name>/`
- Managed skills: `~/.openclaw/skills/<skill-name>/`

## How to Scan All Skills

```bash
python3 {baseDir}/scripts/scan-all-skills.py
```

This discovers and scans every skill in `~/.openclaw/workspace/skills/` and `~/.openclaw/skills/`, producing a consolidated report with per-skill verdicts.

## How to Audit OpenClaw Config

```bash
python3 {baseDir}/scripts/check-config.py
```

Checks `~/.openclaw/openclaw.json` and `.mcp.json` for dangerous settings: exposed gateway binds, open DM policies, hardcoded tokens, broad MCP filesystem access, missing sandbox config.

## Interpreting Results

Findings have three severity tiers:

- **BLOCK** (confidence >= 0.92): DO NOT enable. Warn the user. Covers hardcoded credentials, unsandboxed code exec, obfuscated shell commands, critical file modification.
- **WARN** (0.60-0.91): Inform the user and let them decide. Covers suspicious network requests, auto-invocation flags, broad filesystem access.
- **INFO** (0.30-0.59): Mentio...

搜索