Summary
Before you install any OpenClaw skill, run it through this six-step security review. It checks for typosquatting (missing characters, homoglyphs, scope confusion), over-privileged permission requests (network plus fileRead equals exfiltration risk), dependency vulnerabilities, prompt injection patterns, and data exfiltration signatures. The protocol is opinionated: it blocks combinations like network and shell together, flags base64-encoded instructions, and looks for references to credential files. You get a structured verdict with red flags and a safe-run plan. Treat it like a code review gate for third-party skills. Useful when someone shares a SKILL.md file or before pulling something from ClawHub, especially if the author is unknown or permissions changed between versions.
Install to Claude Code
npx -y skills add useai-pro/openclaw-skills-security --skill skill-auditor --agent claude-codeInstalls into .claude/skills of the current project.
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →Files
SKILL.md
Select a file.
Featured
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →
