# Clawvet

> Vet OpenClaw skills for security threats before installing them. 6-pass scanner detects RCE, credential theft, prompt injection, typosquatting, and social engineering.

- Skill: `dvcrn/clawvet` (Agent Skill)
- Install (CLI): `npx skillmds@latest add dvcrn/clawvet`
- Raw SKILL.md: https://api.skillmd.com/api/skills/dvcrn/clawvet/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: dvcrn (https://skillmd.com/u/dvcrn)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/dvcrn/clawvet

---


> Generated note: shared plugin assets for this package live at the plugin root. Common local references were rewritten when they appeared in backticks or markdown links.

# clawvet

Scan any OpenClaw skill for security threats before you install it.

## Usage

Scan a local skill:

```bash
npx clawvet scan ./skill-folder/
```

Scan with JSON output (for CI/CD):

```bash
npx clawvet scan ./skill-folder/ --format json --fail-on high
```

Audit all installed skills:

```bash
npx clawvet audit
```

Watch for new skill installs and auto-block risky ones:

```bash
npx clawvet watch --threshold 50
```

## What it detects

clawvet runs 6 analysis passes on every skill:

1. **Skill Parser** — Extracts YAML frontmatter, code blocks, URLs, IPs, domains
2. **Static Analysis** — 54 regex patterns: RCE, reverse shells, credential theft, DNS exfil, obfuscation
3. **Metadata Validator** — Undeclared binaries, env vars, missing descriptions
4. **Dependency Checker** — `npx -y` auto-install, global npm installs
5. **Typosquat Detector** — Levenshtein distance against popular skills
6. **Semantic Analysis** — AI-powered social engineering and prompt injection detection (Pro)

## Risk Grades

| Score | Grade | Action |
|-------|-------|--------|
| 0-10 | A | Safe to install |
| 11-25 | B | Safe to install |
| 26-50 | C | Review before installing |
| 51-75 | D | Review carefully |
| 76-100 | F | Do not install |