Skill Security Auditor

Skill Security Auditor

Description

The Skill Security Auditor is a command-line tool that performs pattern-based security analysis of ClawHub skills before installation. Given the recent discovery of 341+ malicious skills (ClawHavoc campaign) that distributed Atomic Stealer (AMOS) and stole cryptocurrency credentials, this tool provides essential pre-installation threat detection.

What this skill provides:

• ✅ Bash script (analyze-skill.sh) for local security analysis
• ✅ Threat intelligence database (patterns/malicious-patterns.json)
• ✅ Pattern matching against 20+ known malicious indicators
• ✅ Risk scoring system (0-100 scale)
• ✅ Detailed audit reports with recommendations

How to use it:

1. Install this skill from ClawHub
2. Run the analyze-skill.sh script against any skill (by slug or local file)
3. Review the risk assessment and findings
4. Make informed decision about installation

Use this tool when:

• About to install a new skill from ClawHub
• Investigating suspicious skill behavior
• Performing security due diligence on community skills
• Auditing your currently installed skills

This tool does NOT:

• ❌ Automatically scan skills (you run it manually)
• ❌ Block installations (it's advisory only)
• ❌ Access VirusTotal API (use ClawHub's web interface for that)
• ❌ Guarantee 100% detection (defense in depth recommended)

Core Capabilities

1. Malicious Pattern Detection

Scans for known malicious patterns from the ClawHavoc campaign:

• Fake prerequisite installations (openclaw-agent.zip, openclaw-setup.exe)
• Suspicious download commands in SKILL.md
• Hidden payload execution in metadata
• Social engineering language patterns
• Unauthorized external binary downloads

2. Credential Leak Analysis

Identifies potential credential exposure vectors:

• Hardcoded API keys, tokens, passwords in SKILL.md
• Suspicious environment variable exfiltration
• Unencrypted sensitive data transmission
• Overly broad permission requests
• Credential harvesting patterns

3. Dependency Chain Validation

Analyzes skill dependencies for:

• Unverified binary requirements
• Suspicious GitHub repository sources
• External script execution
• Network connections to unknown hosts
• Nested dependency exploitation

4. C2 Infrastructure Detection

Checks for Command & Control indicators:

• Known malicious IP addresses (e.g., 91.92.242.30 from ClawHavoc)
• Suspicious domain patterns
• Encoded communication endpoints
• Data exfiltration channels
• Beaconing behavior patterns

5. SKILL.md Structure Validation

Verifies skill integrity:

• Proper YAML frontmatter structure
• Metadata consistency
• Description clarity vs actual behavior
• Permission justification
• Author verification (GitHub account age)

Security Scoring System

Each analyzed skill receives a Risk Score (0-100):

• 0-20: ✅ SAFE - No significant security concerns
• 21-40: ⚠️ LOW RISK - Minor concerns, proceed with caution
• 41-60: 🟡 MEDIUM RISK - Multiple red flags, manual review recommended
• 61-80: 🔴 HIGH RISK - Serious concerns, do NOT install without expert review
• 81-100: ☠️ CRITICAL - Malicious indicators detected, AVOID installation

Usage Instructions

This skill provides a bash script (analyze-skill.sh) that performs pattern-based security analysis of ClawHub skills. The analysis runs locally using the included threat intelligence database.

Installation & Setup

# Install the skill from ClawHub
npx clawhub install skill-security-auditor

# Make the analyzer executable
chmod +x ~/.openclaw/skills/skill-security-auditor/analyze-skill.sh

# Optional: Create alias for convenience
echo 'alias audit-skill="~/.openclaw/skills/skill-security-auditor/analyze-skill.sh"' >> ~/.bashrc
source ~/.bashrc

Audit a Skill Before Installing

Method 1: Analyze by slug (automatic fetch from ClawHub)

~/.openclaw/skills/skill-security-auditor/analyze-skill.sh --slug bitcoin-tracker

# Example output:
# ============================================
#          SECURITY AUDIT REPORT
# ============================================
# 
# Risk Score: 85/100 - ☠️ CRITICAL
# ...

Method 2: Analyze local file

# Download skill first
curl -s "https://clawhub.ai/api/skills/bitcoin-tracker/latest" > /tmp/skill.md

# Then analyze
~/.openclaw/skills/skill-security-auditor/analyze-skill.sh --file /tmp/skill.md

Audit All Installed Skills

# Scan all skills in your workspace
for skill in ~/.openclaw/skills/*/SKILL.md; do
  echo "Checking: $(basename $(dirname $skill))"
  ~/.openclaw/skills/skill-security-auditor/analyze-skill.sh -f "$skill"
done

Quick Manual Security Check

# Fast grep-based pattern matching (no full analysis)
grep -iE "(prerequisite.*download|91\.92\.242\.30|curl.*\|.*bash)" SKILL.md

Detection Heuristics

🚨 CRITICAL Red Flags (Auto-fail)

1. Fake Prerequisites Section

   • Matches: "Prerequisites", "Setup Required", "Installation Steps"
   • Contains: Download links to .zip, .exe, .dmg files
   • Example: "Download openclaw-agent.zip from https://..."

2. Known Malicious Infrastructure

   • IP: 91.92.242.30 (ClawHavoc C2)
   • Domains: Newly registered or suspicious TLDs
   • Encoded URLs or base64 obfuscation

3. Credential Harvesting

   • Regex patterns for API keys: (api[_-]?key|token|password)\s*[:=]\s*['\"][^'\"]+['\"]
   • SSH key access requests
   • Wallet private key patterns

4. Unauthorized Code Execution

   • curl | bash or wget | sh patterns
   • Hidden base64 encoded commands
   • Dynamic eval() or exec() on external input

⚠️ Warning Indicators (Score increase)

1. Suspicious Dependencies

   • Binary requirements without clear justification
   • Dependencies from unverified sources
   • Excessive permission requests

2. Obfuscation Techniques

   • Heavily encoded strings in metadata
   • Minified or obfuscated JavaScript/Python
   • Redirect chains in URLs

3. Social Engineering Language

   • Urgency phrases: "Install immediately", "Limited time"
   • Authority claims: "Official OpenClaw", "Verified by Anthropic"
   • Fear tactics: "Your system is at risk without this"

✅ Positive Security Indicators

1. Verified Author

   • GitHub account > 1 year old
   • Multiple well-rated skills
   • Active community engagement

2. Transparent Dependencies

   • Clear binary requirements with official sources
   • Open-source tool dependencies
   • Well-documented permission needs

3. Code Quality

   • Clean, readable SKILL.md
   • Proper error handling
   • No unnecessary network calls

Audit Report Format

## Security Audit Report
**Skill**: {skill-name}
**Author**: {author}
**Version**: {version}
**Audit Date**: {date}

### Risk Score: {score}/100 - {RISK_LEVEL}

### Critical Findings:
- {finding 1}
- {finding 2}

### Warning Indicators:
- {warning 1}
- {warning 2}

### Positive Indicators:
- {positive 1}
- {positive 2}

### Recommendations:
{INSTALL | DO NOT INSTALL | REVIEW MANUALLY}

### Detailed Analysis:
{Deep dive into specific concerns}

### VirusTotal Link:
{If available from ClawHub}

Integration with VirusTotal

Important: This skill does NOT directly access VirusTotal's API. Instead, VirusTotal integration is available through ClawHub's web interface via their partnership with VirusTotal.

To check VirusTotal results for a skill:

1. Visit the skill's ClawHub page: https://clawhub.ai/skills/{skill-slug}
2. Look for the VirusTotal scan results on the skill's page
3. ClawHub automatically scans published skills via their VirusTotal partnership

This analyzer focuses on pattern-based threat detection. It complements (but does not replace) ClawHub's VirusTotal scanning.

Recommended Security Workflow

1. Run this analyzer first - Pattern-based detection (local, instant)
2. Check ClawHub's VirusTotal results - Binary/file reputation (if available)
3. Manual code review - Final verification for critical use cases

# Step 1: Pattern analysis (local)
~/.openclaw/skills/skill-security-auditor/analyze-skill.sh -s suspicious-skill

# Step 2: Visit ClawHub page for VirusTotal results
# https://clawhub.ai/skills/suspicious-skill

# Step 3: Manual review if needed
curl -s "https://clawhub.ai/api/skills/suspicious-skill/latest" > skill.md
less skill.md

Example Workflow

Scenario: User wants to install a skill called solana-wallet-tracker

Step 1: Run Security Analysis

$ ~/.openclaw/skills/skill-security-auditor/analyze-skill.sh -s solana-wallet-tracker

Fetching skill 'solana-wallet-tracker' from ClawHub...
✓ Skill fetched successfully

Analyzing skill content...

============================================
         SECURITY AUDIT REPORT
============================================

Risk Score: 95/100 - ☠️ CRITICAL

============================================

☠️ CRITICAL FINDINGS:
  CLAW-001: Fake Prerequisites - ClawHavoc Campaign [+50 points]
  └─ Matches the ClawHavoc campaign pattern of fake prerequisites requesting malicious binary downloads
  CLAW-002: Known C2 Infrastructure [+50 points]
  └─ IP address used in ClawHavoc campaign for C2 communications

============================================
RECOMMENDATION:
DO NOT INSTALL. Malicious patterns detected matching known attack campaigns.
============================================

Step 2: Decision

• ☠️ CRITICAL Risk → DO NOT INSTALL
• Report skill to ClawHub moderators
• Look for safe alternatives

Step 3: Verify on ClawHub (optional)

# Visit skill page to check VirusTotal results
open "https://clawhub.ai/skills/solana-wallet-tracker"

Advanced Features

1. Behavioral Analysis (Future Enhancement)

• Sandbox execution monitoring
• Network traffic analysis
• File system access patterns

2. Community Threat Intelligence

• Share malicious skill signatures
• Collaborative IOC database
• Reputation scoring system

3. Continuous Monitoring

• Auto-audit skills on updates
• Alert on new security advisories
• Periodic re-scanning of installed skills

False Positive Mitigation

To minimize false positives:

1. Contextual Analysis: Binary requirements for legitimate tools (e.g., gh for GitHub CLI) are validated against known safe sources
2. Whitelisting: Verified authors and established skills get trust bonuses
3. Human Review Option: Always provide detailed reasoning for security decisions
4. Appeal Process: Users can report false positives for skill reputation adjustment

Compliance & Ethics

This skill:

• ✅ Analyzes publicly available skill metadata
• ✅ Protects user security and privacy
• ✅ Promotes responsible skill development
• ❌ Does NOT perform unauthorized access
• ❌ Does NOT guarantee 100% security (nothing does)
• ❌ Does NOT replace user judgment

Response Templates

Safe Skill

✅ Security Audit Complete

{skill-name} has been analyzed and appears SAFE to install.

Risk Score: {score}/100 (LOW)

No malicious patterns detected. The skill:
- Uses standard dependencies from trusted sources
- Has a verified author with {X} published skills
- Contains clear documentation with no obfuscation
- Requests appropriate permissions for its function

VirusTotal: {link}

Recommendation: Safe to proceed with installation.

Suspicious Skill

🔴 Security Alert: HIGH RISK DETECTED

{skill-name} has been flagged with CRITICAL security concerns.

Risk Score: {score}/100 (HIGH)

⚠️ Critical Findings:
{detailed findings}

This skill matches patterns from the ClawHavoc malware campaign.

Recommendation: DO NOT INSTALL. Consider reporting this skill to ClawHub moderators.

Alternative safe skills: {suggestions}

Technical Implementation Notes

Pattern Database Location: ~/.openclaw/security-auditor/patterns/

• malicious-patterns.json: Known bad indicators
• safe-patterns.json: Whitelisted elements
• ioc-database.json: Indicators of Compromise

Update Mechanism:

# Pull latest threat intelligence
curl -s "https://openclaw-security.github.io/threat-intel/latest.json" \
  > ~/.openclaw/security-auditor/patterns/ioc-database.json

Contributing

Found a new malicious pattern? Submit IOCs to the OpenClaw Security Working Group:

• GitHub: github.com/openclaw/security-auditor
• Report Format: JSON with pattern regex, description, severity

Limitations

⚠️ Important Disclaimers:

• This tool provides analysis, not guarantees
• Sophisticated malware may evade detection
• Always combine with VirusTotal + manual review for critical applications
• Security is a shared responsibility
• No automated tool replaces security expertise

References

• ClawHavoc Campaign Analysis: [The Hacker News, Feb 2026]
• OpenClaw Security Partnership: VirusTotal Integration
• Malicious Skill Database: OpenSourceMalware Research
• ClawHub Moderation Guide: docs.openclaw.ai/security

Remember: The best security is defense in depth. Use this skill as ONE layer of your security strategy, not the only layer.

Stay safe, stay skeptical, stay secure. 🦞🛡️