How do I install the Skillguard skill?

Run npx skillmds@latest add javimosch/skillguard-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Skillguard safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Skillguard?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Skillguard free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Skillguard?

javimosch (@javimosch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Skillguard by javimosch — Agent Skill

Name: Skillguard
Author: javimosch

File contents

SkillGuard 🛡️

AI-powered security scanner for OpenClaw skills. Analyzes skill code for malicious behaviour before you install it.

Commands

Scan before install (recommended)

skillguard install <skill-name>

Downloads the skill to a temp directory, runs AI security analysis, shows verdict, then asks for confirmation before installing via clawhub.

Example:

skillguard install my-new-skill

Audit installed skills

skillguard audit

Scans all skills in /usr/lib/node_modules/openclaw/skills/, ~/.openclaw/workspace/skills/, and ~/.openclaw/skills/. Prints a table summary with details on any flagged skills.

Scan a local path

skillguard scan <path>

Scan any local skill directory without installing. Useful for reviewing skills you've already downloaded or developed locally.

Example:

skillguard scan ./my-skill-folder
skillguard scan /usr/lib/node_modules/openclaw/skills/some-skill

Risk Levels

Level	Meaning
✅ CLEAN	No security issues detected
🟡 LOW	Minor concerns, generally safe
⚠️ MEDIUM	Review recommended before installing
🚨 HIGH	Dangerous — do not install without careful manual review

What Gets Checked

Credential theft: Reads to ~/.ssh/, ~/.openclaw/, API keys, .env files
Data exfiltration: curl/wget/fetch POSTing data to external servers
Reverse shells: netcat, bash TCP redirects, socat to external IPs
Privilege escalation: sudo abuse, setuid bits, writing to /etc/
Persistence: cron installs, systemd units, .bashrc modifications
Obfuscation: base64-piped-to-bash, eval with dynamic content
Package smuggling: undisclosed npm/pip installs
Reconnaissance: network scanning, system info harvesting

Usage by the AI Agent

When the user asks to install a skill, use skillguard first:

python3 /root/.openclaw/workspace/skills/skillguard/skillguard.py install <skill-name>

When the user asks to check their installed skills for security issues:

python3 /root/.openclaw/workspace/skills/skillguard/skillguard.py audit

When the user asks to check a specific local skill directory:

python3 /root/.openclaw/workspace/skills/skillguard/skillguard.py scan /path/to/skill

Output Examples

Clean skill:

✅ SkillGuard: good-skill — Clean. Installing...

Flagged skill:

🚨 SkillGuard: bad-skill — Risk: HIGH
   Reads /root/.openclaw/*.json and POSTs to external IP.

   [HIGH] Data Exfiltration: curl POST of ~/.openclaw/openclaw.json to 45.33.32.156 [scripts/init.sh:14-22]
   [MEDIUM] Credential Theft: Reads ~/.ssh/id_rsa without disclosure [scripts/setup.sh:8]

Install bad-skill anyway? (type YES to confirm)

Requirements

Python 3.6+
An Anthropic, OpenRouter, or DeepSeek API key configured in OpenClaw
clawhub CLI (for install command only)

Notes

Binary files are automatically skipped
Files larger than 100KB are truncated before analysis
Analysis uses Claude Opus (or best available model) for maximum accuracy
The scan itself is safe — skills are text files, not executed during scanning

---name: skillguard-2description: AI-powered security scanner for OpenClaw skills. Scans skill files for credential theft, data exfiltration, reverse shells, obfuscation, and other threats before installation.---# SkillGuard 🛡️AI-powered security scanner for OpenClaw skills. Analyzes skill code for malicious behaviour before you install it.## Commands### Scan before install (recommended)```bashskillguard install <skill-name>```Downloads the skill to a temp directory, runs AI security analysis, shows verdict, then asks for confirmation before installing via clawhub.**Example:**```skillguard install my-new-skill```### Audit installed skills```bashskillguard audit```Scans all skills in `/usr/lib/node_modules/openclaw/skills/`, `~/.openclaw/workspace/skills/`, and `~/.openclaw/skills/`. Prints a table summary with details on any flagged skills.### Scan a local path```bashskillguard scan <path>```Scan any local skill directory without installing. Useful for reviewing skills you've already downloaded or developed locally.**Example:**```skillguard scan ./my-skill-folderskillguard scan /usr/lib/node_modules/openclaw/skills/some-skill```## Risk Levels| Level | Meaning ||--------|---------|| ✅ CLEAN | No security issues detected || 🟡 LOW | Minor concerns, generally safe || ⚠️ MEDIUM | Review recommended before installing || 🚨 HIGH | Dangerous — do not install without careful manual review |## What Gets Checked- **Credential theft**: Reads to `~/.ssh/`, `~/.openclaw/`, API keys, `.env` files- **Data exfiltration**: curl/wget/fetch POSTing data to external servers- **Reverse shells**: netcat, bash TCP redirects, socat to external IPs- **Privilege escalation**: sudo abuse, setuid bits, writing to `/etc/`- **Persistence**: cron installs, systemd units, `.bashrc` modifications- **Obfuscation**: base64-piped-to-bash, eval with dynamic content- **Package smuggling**: undisclosed npm/pip installs- **Reconnaissance**: network scanning, system info harvesting## Usage by the AI AgentWhen the user asks to install a skill, use skillguard first:```bashpython3 /root/.openclaw/workspace/skills/skillguard/skillguard.py install <skill-name>```When the user asks to check their installed skills for security issues:```bashpython3 /root/.openclaw/workspace/skills/skillguard/skillguard.py audit```When the user asks to check a specific local skill directory:```bashpython3 /root/.openclaw/workspace/skills/skillguard/skillguard.py scan /path/to/skill```## Output Examples**Clean skill:**```✅ SkillGuard: good-skill — Clean. Installing...```**Flagged skill:**```🚨 SkillGuard: bad-skill — Risk: HIGH Reads /root/.openclaw/*.json and POSTs to external IP. [HIGH] Data Exfiltration: curl POST of ~/.openclaw/openclaw.json to 45.33.32.156 [scripts/init.sh:14-22] [MEDIUM] Credential Theft: Reads ~/.ssh/id_rsa without disclosure [scripts/setup.sh:8]Install bad-skill anyway? (type YES to confirm)```## Requirements- Python 3.6+- An Anthropic, OpenRouter, or DeepSeek API key configured in OpenClaw- `clawhub` CLI (for `install` command only)## Notes- Binary files are automatically skipped- Files larger than 100KB are truncated before analysis- Analysis uses Claude Opus (or best available model) for maximum accuracy- The scan itself is safe — skills are text files, not executed during scanning

Frequently asked questions

Skillguard