skills.rest
Qcasares
QcasaresCOMMUNITY
Explore all skills by this author →
GitHub

skill-scanner

Scan OpenBot/Clawdbot skills for security vulnerabilities using Python scripts and regex patterns.

Updated Feb 17, 2026
Search Tags:#security#vulnerability#skills#malware#scanner
One-click install
npx skills add https://github.com/Qcasares/saas-app --skill skill-scanner-qcasares
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: skill-scanner
Source: https://github.com/Qcasares/saas-app/tree/main/skills/ai-skill-scanner
Command: npx skills add https://github.com/Qcasares/saas-app --skill skill-scanner-qcasares

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify security vulnerabilities, malicious code, and suspicious patterns in OpenBot/Clawdbot skills before installation, ensuring a safe environment for skill usage.

Core Features & Use Cases

  • Security Vulnerability Scanning: Detects security vulnerabilities like credential exfiltration and malicious code.
  • Malware Scan: Identifies malware and suspicious patterns.
  • Trust Verification: Verifies the safety of skills from ClawHub.
  • Use Case: When you want to audit a skill, check if a ClawHub skill is safe, scan for credential exfiltration, detect prompt injection, or review skill security.

Quick Start

Run python3 scripts/scan.py /path/to/skill to scan a skill for security vulnerabilities.

Frequently Asked Questions about skill-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a skill for malicious code and security vulnerabilities?▼

To scan a skill for malicious code and security vulnerabilities, run `python3 scripts/scan.py /path/to/skill`. This Python script identifies credential exfiltration, suspicious network calls, and prompt injection using regex patterns.

What types of security red flags can be detected during a skill audit?▼

A skill audit detects red flags including credential exfiltration, suspicious network calls, obfuscated code, prompt injection, and other malicious patterns. It uses regex patterns to securely identify these vulnerabilities before installation.

Do I need Python installed to check if a ClawHub skill is safe?▼

Yes, you need Python installed to check if a ClawHub skill is safe. The scanner relies on Python scripts and regex patterns to verify trust and identify suspicious patterns or malicious code in the skill files.

Can regex patterns detect obfuscated code and prompt injection in scripts?▼

Regex patterns can detect obfuscated code and prompt injection in scripts by matching known malicious signatures. The scanner applies these patterns to identify suspicious network calls and credential exfiltration attempts within the skill source.

Related Skills

Explore More Software Engineering Skills→
ScavieFaeScavieFae
9

setup

Detect the host platform, install dependencies, and configure Dolphin, Slippi, and Phillip.

Community
Advanced
gula00gula00
2

skill-vetter

Audit AI agent skills for malicious patterns and prompt injection risks.

Community
Intermediate
SandroBeatzSandroBeatz

lint-check

Run ESLint and TypeScript type checking on a codebase.

Community
Intermediate
aztr0nutzsaztr0nutzs
2

skill-scanner

Scan skill code files for security vulnerabilities and malicious patterns.

Community
Intermediate