How do I install the Skill Auditor skill?

Run npx skillmds@latest add dvcrn/skill-auditor-3 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Skill Auditor safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Skill Auditor?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Skill Auditor free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Skill Auditor?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Skill Auditor by dvcrn — Agent Skill

Name: Skill Auditor
Rating: 4.5 (4 reviews)
Author: dvcrn

Skill Auditor

Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skill. Triggers: audit skill, check security, scan skill, is this skill safe, security review, quarantine.

dvcrn Updated Sep 9, 2026 32 repo stars

File contents

Skill Auditor v2.0 🔍🛡️

Comprehensive security scanner for OpenClaw/ClawHub skills. Merges static analysis, deobfuscation, and threat intelligence into a single Python tool.

When to Use

Before installing any third-party skill from ClawHub
When reviewing skill updates for security regressions
To audit your own skills before publishing
When someone asks: "is this skill safe?", "audit this", "check security"

Quick Start

Audit a local skill directory

python3 {baseDir}/scripts/audit_skill.py /path/to/skill --human

Audit a ClawHub skill by slug

python3 {baseDir}/scripts/audit_skill.py --slug skill-name --human

Quarantine workflow (audit + prompt to install)

bash {baseDir}/scripts/quarantine.sh /path/to/skill
bash {baseDir}/scripts/quarantine.sh --slug skill-name

JSON output for programmatic use

python3 {baseDir}/scripts/audit_skill.py /path/to/skill --json

Scoring System

Score	Level	Action
0–20	✅ SAFE	Auto-install OK
21–40	🟢 LOW RISK	Proceed with caution
41–60	🟡 MEDIUM RISK	Manual review required
61–80	🟠 HIGH RISK	Expert review needed
81–100	🔴 CRITICAL	Do NOT install

Exit codes: 0 = safe (≤20), 1 = review (21–60), 2 = dangerous (>60)

Detection Layers

Layer 1: Static Pattern Analysis

10+ scan categories with regex patterns
Shell execution, network calls, env access, filesystem escape
Prompt injection, data exfiltration, crypto wallet access
Dynamic imports, browser credential theft, fake prerequisites

Layer 2: Deobfuscation

Base64 string extraction and decode → re-scan decoded content
Hex escape sequence decode → re-scan
Detects hidden commands, C2 IPs in encoded payloads

Layer 3: Threat Intelligence

IoC database: known malicious IPs, domains
Social engineering detection: urgency, false authority, fear tactics
MITRE ATT&CK ID mapping on every finding
Whitelist system reduces score for safe binaries/domains

Additional Checks

SHA256 file inventory for integrity verification
Typosquat detection (Levenshtein distance on package names)
Zero-width character detection in SKILL.md
Comment-context severity reduction (findings in comments scored lower)
Permission scope analysis (what tools does the skill request?)

IoC Database

Structured threat data in references/ioc-database.json. Update when new threats emerge. The scanner auto-loads this file at runtime.

References

references/ioc-database.json — Structured IoC data (IPs, domains, patterns)
references/known-patterns.md — Human-readable threat documentation
references/prompt-injection-patterns.md — Prompt injection pattern reference

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

Fork of skill-auditor-pro by sypsyp97, merged with skill-security-auditor by akm626.

---name: skill-auditor-3description: Security scanner for OpenClaw skills. Detects malicious code, obfuscated payloads, prompt injection, social engineering, typosquatting, and data exfiltration before installation. Features 0-100 numeric risk scoring, MITRE ATT&CK mappings, base64/hex deobfuscation, IoC database, whitelist system, and SHA256 file inventory. Use before installing any third-party skill. Triggers: audit skill, check security, scan skill, is this skill safe, security review, quarantine.--- # Skill Auditor v2.0 🔍🛡️ Comprehensive security scanner for OpenClaw/ClawHub skills. Merges static analysis, deobfuscation, and threat intelligence into a single Python tool. ## When to Use - Before installing **any** third-party skill from ClawHub - When reviewing skill updates for security regressions - To audit your own skills before publishing - When someone asks: "is this skill safe?", "audit this", "check security" ## Quick Start ### Audit a local skill directory ```bash python3 {baseDir}/scripts/audit_skill.py /path/to/skill --human ``` ### Audit a ClawHub skill by slug ```bash python3 {baseDir}/scripts/audit_skill.py --slug skill-name --human ``` ### Quarantine workflow (audit + prompt to install) ```bash bash {baseDir}/scripts/quarantine.sh /path/to/skill bash {baseDir}/scripts/quarantine.sh --slug skill-name ``` ### JSON output for programmatic use ```bash python3 {baseDir}/scripts/audit_skill.py /path/to/skill --json ``` ## Scoring System | Score | Level | Action | |-------|-------|--------| | 0–20 | ✅ SAFE | Auto-install OK | | 21–40 | 🟢 LOW RISK | Proceed with caution | | 41–60 | 🟡 MEDIUM RISK | Manual review required | | 61–80 | 🟠 HIGH RISK | Expert review needed | | 81–100 | 🔴 CRITICAL | Do NOT install | Exit codes: `0` = safe (≤20), `1` = review (21–60), `2` = dangerous (>60) ## Detection Layers ### Layer 1: Static Pattern Analysis - 10+ scan categories with regex patterns - Shell execution, network calls, env access, filesystem escape - Prompt injection, data exfiltration, crypto wallet access - Dynamic imports, browser credential theft, fake prerequisites ### Layer 2: Deobfuscation - Base64 string extraction and decode → re-scan decoded content - Hex escape sequence decode → re-scan - Detects hidden commands, C2 IPs in encoded payloads ### Layer 3: Threat Intelligence - IoC database: known malicious IPs, domains - Social engineering detection: urgency, false authority, fear tactics - MITRE ATT&CK ID mapping on every finding - Whitelist system reduces score for safe binaries/domains ### Additional Checks - SHA256 file inventory for integrity verification - Typosquat detection (Levenshtein distance on package names) - Zero-width character detection in SKILL.md - Comment-context severity reduction (findings in comments scored lower) - Permission scope analysis (what tools does the skill request?) ## IoC Database Structured threat data in `references/ioc-database.json`. Update when new threats emerge. The scanner auto-loads this file at runtime. ## References - `references/ioc-database.json` — Structured IoC data (IPs, domains, patterns) - `references/known-patterns.md` — Human-readable threat documentation - `references/prompt-injection-patterns.md` — Prompt injection pattern reference ## Credits Built by [M. Abidi](https://www.linkedin.com/in/mohammad-ali-abidi) | [agxntsix.ai](https://www.agxntsix.ai) [YouTube](https://youtube.com/@aiwithabidi) | [GitHub](https://github.com/aiwithabidi) Part of the **AgxntSix Skill Suite** for OpenClaw agents. 📅 **Need help setting up OpenClaw for your business?** [Book a free consultation](https://cal.com/agxntsix/abidi-openclaw) Fork of [skill-auditor-pro](https://clawhub.ai/skills/skill-auditor-pro) by sypsyp97, merged with [skill-security-auditor](https://clawhub.ai/skills/skill-security-auditor) by akm626.

Frequently asked questions