Skill Guardian

Scan OpenClaw skills for malicious code and security threats.

1|Updated Mar 13, 2026
One-click install
npx skills add https://github.com/traygerbig/clawhub-skills --skill skill-guardian
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Skill Guardian
Source: https://github.com/traygerbig/clawhub-skills/tree/main/archive/skill-guardian
Command: npx skills add https://github.com/traygerbig/clawhub-skills --skill skill-guardian

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill ensures the safety and integrity of AI agent skills by scanning for and protecting against potential security threats, such as malware, credential theft, and data exfiltration.

Core Features & Use Cases

  • 5-Layer Security Scan: Static, dependency, behavioral, reputation, and semantic analysis to detect malicious code and vulnerabilities.
  • Real-Time Monitoring: Continuously monitor skills for updates and changes, providing alerts on potential risks.
  • Threat Database: Utilizes a database of known malicious patterns from the ClawHavoc campaign to detect and prevent future threats.

Quick Start

To initiate a security scan for a skill, use the command guard scan <skill-slug>.

Frequently Asked Questions about Skill Guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan AI agent skills for malware and data exfiltration before installation?

To scan AI agent skills for malware and data exfiltration, you can use a comprehensive security scanner that performs static analysis, behavioral simulation, and reputation scoring. The command `guard scan <skill-slug>` initiates this threat detection.

What is a 5-layer security scan for AI skills?

A 5-layer security scan for AI skills is a threat detection mechanism that applies static, dependency, behavioral, reputation, and semantic analysis to identify malicious code, vulnerabilities, and supply chain attacks.

How does behavioral simulation detect supply chain attacks in AI agents?

Behavioral simulation detects supply chain attacks in AI agents by monitoring file system and network access permissions during skill operation, identifying data exfiltration attempts and malicious code execution patterns dynamically.

Do I need pypdf and pdfplumber to run security scanning on skills?

Yes, you need pypdf and pdfplumber installed to run security scanning on skills, as these dependencies are specifically required for parsing PDF files during the semantic analysis and threat detection process.

Can I monitor AI skills in real-time for malicious code updates?

Yes, you can monitor AI skills in real-time for malicious code updates. The scanner continuously tracks skill changes and provides alerts on potential risks using a threat database of known malicious patterns.

What are the limitations of static analysis for AI security scanning?

Static analysis for AI security scanning is limited to detecting known malicious patterns in source code without executing it. It must be combined with behavioral simulation and semantic analysis to catch dynamic data exfiltration and zero-day threats.