skill-audit-guardian

# Skill Audit Guardian

Security helper for reviewing skill ZIPs before production install.

## What it does

1. Watches a drop folder for `.zip` files
2. Audits each ZIP for suspicious patterns
3. Scores and classifies into:
   - SAFE
   - CAUTION
   - REMOVE
4. Auto-moves files into risk folders
5. Generates a dashboard with plain-English reasoning per flagged line

## Included scripts

- `scripts/skill-zip-audit.sh`
  - One-shot ZIP auditor
- `scripts/skill-zip-watch.sh`
  - Continuous watcher + auto-sorter
- `scripts/generate-skill-audit-pro.py`
  - Dashboard generator (`~/Desktop/skill-audit-pro.html`)

## Quick start

```bash
# One-shot audit
bash scripts/skill-zip-audit.sh ~/Desktop/skill-drop/example.zip

# Continuous mode (recommended)
bash scripts/skill-zip-watch.sh ~/Desktop/skill-drop
```

## Folder output (watch mode)

- `~/Desktop/skill-drop/safe`
- `~/Desktop/skill-drop/caution`
- `~/Desktop/skill-drop/remove`
- `~/Desktop/skill-drop/failed`

## Dashboard

```bash
open ~/Desktop/skill-audit-pro.html
```

## Notes

- This is heuristic scanning, not a full malware sandbox.
- Always test CAUTION/REMOVE skills in isolated environment first.

# Skill Audit Guardian

Ready-to-upload ClawHub package.

## Purpose
Provide a practical pre-install security gate for skill ZIP files:
- static pattern scan
- risk classification
- automatic folder segregation
- plain-English dashboard explanation

## Included
- SKILL.md
- scripts/skill-zip-audit.sh
- scripts/skill-zip-watch.sh
- scripts/generate-skill-audit-pro.py

## Publish example (CLI)
```bash
clawhub publish /Users/gascomp/Desktop/skill-audit-guardian \
  --slug skill-audit-guardian \
  --name "Skill Audit Guardian" \
  --version 1.0.0 \
  --changelog "Initial release: ZIP audit, auto-sort by risk, and plain-English dashboard"
```