Skill Advisories Check

Check an OpenClaw or ClawHub skill against public security advisories before installation.

Akshay7273 Updated

File contents

Skill advisory check

Use this skill before installing or updating an untrusted OpenClaw/ClawHub skill. Ask for the exact registry identity and version when the request is ambiguous.

Run from this skill directory:

node scripts/check-artifact.mjs <skill-name> --version <version>

Exit code 0 means no matching advisory is currently known; it does not prove the artifact is safe. Exit code 1 means policy found a known advisory. Exit code 2 means the check could not complete and installation must stop.

Report the SKA identifier, severity, summary, and evidence URLs to the user. Do not proceed automatically after a warning or operational failure.

Akshay7273/skill-advisories/tree/main/integrations/openclaw commit abed4459b8

Frequently asked questions

npx skillmds@latest add akshay7273/skill-advisories-check