skills.rest
simtransforma
simtransformaCOMMUNITY
Explore all skills by this author →
GitHub

skill-auditor

Scan OpenClaw skills for security vulnerabilities and generate risk scores.

Updated Aug 23, 2026
Search Tags:#security#audit#prompt injection#threat intelligence#malware detection#vulnerability scanning
One-click install
npx skills add https://github.com/simtransforma/HAOS_HAU-AI-Operating-System --skill skill-auditor-simtransforma
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: skill-auditor
Source: https://github.com/simtransforma/HAOS_HAU-AI-Operating-System/tree/main/HAOS/skills/skill-auditor-v2
Command: npx skills add https://github.com/simtransforma/HAOS_HAU-AI-Operating-System --skill skill-auditor-simtransforma

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill safeguards your system by automatically scanning third-party skills for malicious code, prompt injection, and other security vulnerabilities before they are installed.

Core Features & Use Cases

  • Proactive Security Scanning: Detects a wide range of threats including malware, obfuscated code, and data exfiltration attempts.
  • Risk Scoring: Provides a clear 0-100 risk score and MITRE ATT&CK mappings for each finding.
  • Use Case: Before installing a new skill from an untrusted source, run this auditor to ensure it doesn't contain hidden backdoors or attempt to steal sensitive information.

Quick Start

Audit the local skill directory located at '/path/to/skill' and display the results in a human-readable format.

Frequently Asked Questions about skill-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan third-party skills for prompt injection and malicious code before installing them?▼

To scan third-party skills for prompt injection and malicious code, you can audit the local skill directory or remote slug to detect data exfiltration attempts and receive a 0-100 risk score.

What is static analysis and threat intelligence for skill vulnerability scanning?▼

Skill vulnerability scanning uses static analysis and threat intelligence to detect obfuscated code, malware, and data exfiltration, providing MITRE ATT&CK mappings for each identified security finding.

Can I audit a remote OpenClaw skill using its slug?▼

Yes, you can audit remote OpenClaw skills via their slug, allowing the scanner to fetch and analyze the skill code for hidden backdoors and security vulnerabilities before installation.

Does the security audit provide a risk score for detected vulnerabilities?▼

The security audit provides a clear 0-100 risk score alongside MITRE ATT&CK mappings to quantify and categorize the severity of detected malware and prompt injection threats.

How to deobfuscate code to find hidden backdoors in local skill directories?▼

To find hidden backdoors in local skill directories, the audit process utilizes deobfuscation techniques to reveal malicious code and data exfiltration attempts that are otherwise concealed.

Related Skills

Explore More Software Engineering Skills→
epologeeepologee
3

translate

Translate Claude Code skill documentation between Dutch and English.

Community
Intermediate
Amazon-QuickAmazon-Quick
47

vulnerability-report-summarizer

Parse vulnerability scan data, deduplicate findings, and score risk with CVSS.

Official
Advanced
hypnguyen1209hypnguyen1209
338

malware-analysis

Dissect malware samples to produce threat intelligence and IOCs.

Community
Advanced
BoraPerusicBoraPerusic

code-reviewer

Automate expert code review for multi-language codebases and pull requests.

Community
Advanced