How do I install the Skill Flag skill?

Run npx skillmds@latest add demerzels-lab/skill-flag in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Skill Flag skill do?

Skill Flag Skill 🛡️ It is listed under Coding & Dev Tools on SkillMD.

Is Skill Flag safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Skill Flag?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Skill Flag free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Skill Flag?

Demerzels-lab (@demerzels-lab) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Skill Flag by demerzels-lab — Agent Skill

Name: Skill Flag
Author: Demerzels-lab

File contents

Skill Flag Skill 🛡️

Scan Clawdbot/OpenClaw skills for malicious patterns, backdoors, and security risks.

Created by: DarkM00n (Bug Bounty Hunter & Security Researcher)

Commands

Scan All Installed Skills

scan skills
scan all skills
security scan

Scan Specific Skill

scan skill <skill-name>
check skill <skill-name>

Scan Before Installing (URL/Path)

scan skill url <clawdhub-url>
pre-scan <skill-name>

Quick Risk Report

skill risk report
security report

How To Use

Run the scanner:

python3 skills/skill-flag/scanner.py [--skill NAME] [--all] [--verbose]

Or ask the agent:

"Scan all my installed skills for security issues"
"Check if the crypto-tracker skill is safe"
"Give me a security report"

What It Detects

Category	Risk Level	Examples
🔴 Data Exfiltration	CRITICAL	curl/wget to external domains, fetch(), requests.post()
🔴 Backdoors	CRITICAL	Reverse shells, nc -e, bash -i, encoded payloads
🔴 Credential Theft	CRITICAL	Access to ~/.ssh, ~/.aws, API keys, .env files
🟠 Prompt Injection	HIGH	"ignore previous", "system override", "new instructions"
🟠 Code Execution	HIGH	eval(), exec(), subprocess with shell=True
🟡 Persistence	MEDIUM	Cron jobs, systemd units, startup scripts
🟡 Obfuscation	MEDIUM	Base64 encoded commands, hex strings, rot13
🟢 Suspicious	LOW	Uncommon imports, network activity

Risk Score

Each skill gets a score from 0-100:

0-20: ✅ Clean - No issues found
21-40: 🟢 Low Risk - Minor concerns
41-60: 🟡 Medium Risk - Review recommended
61-80: 🟠 High Risk - Careful inspection needed
81-100: 🔴 Critical - Do not use without audit

Output

Reports saved to: skills/skill-flag/reports/

Example output:

🛡️ SECURITY SCAN REPORT
━━━━━━━━━━━━━━━━━━━━━━━
Scanned: 12 skills
Clean: 9
Warnings: 2
Critical: 1

⚠️ WARNINGS:
- crypto-tracker: External API calls (expected for price data)
- web-scraper: Uses requests library

🔴 CRITICAL:
- shady-skill: 
  - Line 45: curl to unknown domain
  - Line 67: Base64 encoded payload
  - Line 89: Reads ~/.ssh/id_rsa
  RECOMMENDATION: Remove immediately

Directories Scanned

~/.clawdbot/skills/ - Global installed skills
./skills/ - Workspace skills
~/.npm-global/lib/node_modules/clawdbot/skills/ - Built-in skills

False Positives

Some legitimate skills need network access or file operations. The scanner flags them for review but doesn't auto-block. Use judgment:

Price trackers → API calls expected ✓
Email skills → Network access expected ✓
File managers → File operations expected ✓

Pro Version (Coming Soon)

Continuous monitoring
ClawdHub pre-install scanning
Custom whitelist/blacklist
Scheduled reports
Webhook alerts

---name: skill-flagdescription: Skill Flag Skill 🛡️---# Skill Flag Skill 🛡️Scan Clawdbot/OpenClaw skills for malicious patterns, backdoors, and security risks.**Created by:** DarkM00n (Bug Bounty Hunter & Security Researcher)## Commands### Scan All Installed Skills```scan skillsscan all skillssecurity scan```### Scan Specific Skill```scan skill <skill-name>check skill <skill-name>```### Scan Before Installing (URL/Path)```scan skill url <clawdhub-url>pre-scan <skill-name>```### Quick Risk Report```skill risk reportsecurity report```## How To UseRun the scanner:```bashpython3 skills/skill-flag/scanner.py [--skill NAME] [--all] [--verbose]```Or ask the agent:- "Scan all my installed skills for security issues"- "Check if the crypto-tracker skill is safe"- "Give me a security report"## What It Detects| Category | Risk Level | Examples ||----------|------------|----------|| 🔴 Data Exfiltration | CRITICAL | curl/wget to external domains, fetch(), requests.post() || 🔴 Backdoors | CRITICAL | Reverse shells, nc -e, bash -i, encoded payloads || 🔴 Credential Theft | CRITICAL | Access to ~/.ssh, ~/.aws, API keys, .env files || 🟠 Prompt Injection | HIGH | "ignore previous", "system override", "new instructions" || 🟠 Code Execution | HIGH | eval(), exec(), subprocess with shell=True || 🟡 Persistence | MEDIUM | Cron jobs, systemd units, startup scripts || 🟡 Obfuscation | MEDIUM | Base64 encoded commands, hex strings, rot13 || 🟢 Suspicious | LOW | Uncommon imports, network activity |## Risk ScoreEach skill gets a score from 0-100:- **0-20**: ✅ Clean - No issues found- **21-40**: 🟢 Low Risk - Minor concerns- **41-60**: 🟡 Medium Risk - Review recommended - **61-80**: 🟠 High Risk - Careful inspection needed- **81-100**: 🔴 Critical - Do not use without audit## OutputReports saved to: `skills/skill-flag/reports/`Example output:```🛡️ SECURITY SCAN REPORT━━━━━━━━━━━━━━━━━━━━━━━Scanned: 12 skillsClean: 9Warnings: 2Critical: 1⚠️ WARNINGS:- crypto-tracker: External API calls (expected for price data)- web-scraper: Uses requests library🔴 CRITICAL:- shady-skill: - Line 45: curl to unknown domain - Line 67: Base64 encoded payload - Line 89: Reads ~/.ssh/id_rsa RECOMMENDATION: Remove immediately```## Directories Scanned1. `~/.clawdbot/skills/` - Global installed skills2. `./skills/` - Workspace skills3. `~/.npm-global/lib/node_modules/clawdbot/skills/` - Built-in skills## False PositivesSome legitimate skills need network access or file operations. The scanner flags them for review but doesn't auto-block. Use judgment:- Price trackers → API calls expected ✓- Email skills → Network access expected ✓- File managers → File operations expected ✓## Pro Version (Coming Soon)- Continuous monitoring- ClawdHub pre-install scanning- Custom whitelist/blacklist- Scheduled reports- Webhook alerts

Frequently asked questions

Skill Flag