Skill Guardian

Scan OpenClaw skills for malicious code and dependency threats.

3|2|Updated Mar 1, 2026
One-click install
npx skills add https://github.com/hanabi-jpn/clawhub-skills --skill skill-guardian-hanabi-jpn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Skill Guardian
Source: https://github.com/hanabi-jpn/clawhub-skills/tree/main/archive/skill-guardian
Command: npx skills add https://github.com/hanabi-jpn/clawhub-skills --skill skill-guardian-hanabi-jpn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Ensures security of installed skills against potential vulnerabilities and attacks after the ClawHavoc incident.

Core Features & Use Cases

  • Multi-Layer Security Scan: Performs 5-layer scanning for potential threats like credential theft, data exfiltration, and malicious code.
  • Dependency Analysis: Checks for malicious or compromised dependencies in skill installations.
  • Reputation Score: Evaluates the author's reputation and the skill's history to assess its trustworthiness.
  • Semantic Analysis: Uses AI to detect obfuscated or malicious instructions in code.
  • Automated Installation Hook: Hooks into the skill installation process to perform real-time security checks.

Quick Start

Run the command guard scan <skill-slug> to initiate a security scan for the specified skill.

Frequently Asked Questions about Skill Guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan OpenClaw skills for malware and malicious code before installing?

To scan OpenClaw skills for malware, you initiate a 5-layer security scan by running the command `guard scan <skill-slug>`. This process detects malicious code, supply chain attacks, and data exfiltration to ensure safety before installation.

How does AI semantic analysis detect obfuscated malicious instructions in skill code?

AI semantic analysis detects obfuscated malicious instructions by evaluating the underlying intent of the skill code. It identifies hidden C2 backdoors and credential theft mechanisms that traditional signature-based malware scanners might miss during the security audit.

Can I check skill dependencies for supply chain attacks automatically?

Yes, you can check skill dependencies for supply chain attacks automatically. The security scanner performs dedicated dependency analysis to identify malicious or compromised packages during the skill installation hook process.

What is a reputation score in OpenClaw skill security auditing?

A reputation score in OpenClaw skill security auditing evaluates the author's reputation and the skill's history. It assesses overall trustworthiness to help determine if a skill is safe to install and free from potential vulnerabilities.

How do I prevent data exfiltration and C2 backdoors when installing new OpenClaw skills?

You prevent data exfiltration and C2 backdoors by running a multi-layer security scan before installation. The automated installation hook performs real-time security checks to block credential theft and malicious network communications.

Does the automated installation hook support real-time security checks for OpenClaw skills?

Yes, the automated installation hook supports real-time security checks for OpenClaw skills. It hooks directly into the skill installation process to perform immediate 5-layer security scanning, blocking malicious code and supply chain threats instantly.

Related Skills