How do I install the Openclaw Skill Scanner skill?

Run npx skillmds@latest add demerzels-lab/openclaw-skill-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Openclaw Skill Scanner skill do?

Skill Scanner It is listed under Coding & Dev Tools on SkillMD.

Is Openclaw Skill Scanner safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Openclaw Skill Scanner?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Openclaw Skill Scanner free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Openclaw Skill Scanner?

Demerzels-lab (@demerzels-lab) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Openclaw Skill Scanner by demerzels-lab

Name: Openclaw Skill Scanner
Author: Demerzels-lab

File contents

Skill Scanner

Name: skill-scanner Version: 1.0.0 Author: vrtlly.us Category: Security

Description

Scans ClawHub skills for malicious patterns before and after installation. Detects base64 payloads, reverse shells, data exfiltration, crypto miners, obfuscated URLs, and more.

Usage

Scan all installed skills

python3 scanner.py

Scan a specific skill

python3 scanner.py --skill <skill-name>

Scan a specific file

python3 scanner.py --file <path-to-file>

Pre-install scan (download → scan → report → cleanup)

python3 scanner.py --pre-install <clawhub-slug>

JSON output

python3 scanner.py --json
python3 scanner.py --skill <name> --json

Safe install hook

bash install-hook.sh <clawhub-slug>
bash install-hook.sh <clawhub-slug> --force

Detection Patterns

Category	What it catches
Base64 payloads	Long base64 strings near exec/bash/eval
Pipe to shell	`curl ... \| bash`, `wget ... \| sh`
Raw IP connections	`http://1.2.3.4` style URLs
Dangerous functions	`eval()`, `exec()`, `os.system()`, `subprocess(shell=True)`
Hidden files	Dotfile creation in unexpected places
Env exfiltration	Reading `.env`, API keys sent outbound
Obfuscated URLs	rentry.co, pastebin, hastebin redirectors
Fake dependencies	References to non-existent packages
Data exfil endpoints	webhook.site, requestbin, etc.
Crypto mining	xmrig, stratum, mining pool references
Password archives	Password-protected zip/tar downloads

Risk Scores

0-29 (Green): Clean — no suspicious patterns found
30-69 (Yellow): Suspicious — review warnings before use
70-100 (Red): Dangerous — likely malicious, do not install

Files

scanner.py — Main scanner engine
install-hook.sh — Safe installation wrapper
whitelist.json — Known-good and known-bad skill lists
report-template.md — Markdown report template

---name: openclaw-skill-scannerdescription: Skill Scanner---# Skill Scanner**Name:** skill-scanner**Version:** 1.0.0**Author:** vrtlly.us**Category:** Security## DescriptionScans ClawHub skills for malicious patterns before and after installation. Detects base64 payloads, reverse shells, data exfiltration, crypto miners, obfuscated URLs, and more.## Usage### Scan all installed skills```bashpython3 scanner.py```### Scan a specific skill```bashpython3 scanner.py --skill <skill-name>```### Scan a specific file```bashpython3 scanner.py --file <path-to-file>```### Pre-install scan (download → scan → report → cleanup)```bashpython3 scanner.py --pre-install <clawhub-slug>```### JSON output```bashpython3 scanner.py --jsonpython3 scanner.py --skill <name> --json```### Safe install hook```bashbash install-hook.sh <clawhub-slug>bash install-hook.sh <clawhub-slug> --force```## Detection Patterns| Category | What it catches ||---|---|| Base64 payloads | Long base64 strings near exec/bash/eval || Pipe to shell | `curl ... \| bash`, `wget ... \| sh` || Raw IP connections | `http://1.2.3.4` style URLs || Dangerous functions | `eval()`, `exec()`, `os.system()`, `subprocess(shell=True)` || Hidden files | Dotfile creation in unexpected places || Env exfiltration | Reading `.env`, API keys sent outbound || Obfuscated URLs | rentry.co, pastebin, hastebin redirectors || Fake dependencies | References to non-existent packages || Data exfil endpoints | webhook.site, requestbin, etc. || Crypto mining | xmrig, stratum, mining pool references || Password archives | Password-protected zip/tar downloads |## Risk Scores- **0-29 (Green):** Clean — no suspicious patterns found- **30-69 (Yellow):** Suspicious — review warnings before use- **70-100 (Red):** Dangerous — likely malicious, do not install## Files- `scanner.py` — Main scanner engine- `install-hook.sh` — Safe installation wrapper- `whitelist.json` — Known-good and known-bad skill lists- `report-template.md` — Markdown report template

Frequently asked questions

Openclaw Skill Scanner