🎁 Get the FREE AI Skills Starter Guide β€” Subscribe β†’
BytesAgainBytesAgain
BytesAgain β€Ί Skills β€Ί CLAW-1 Skill Auditor
πŸ¦€ ClawHub

CLAW-1 Skill Auditor

by @gpunter

Analyze SKILL.md files for security risks, quality issues, and best-practice violations to ensure safe, trustworthy OpenClaw skill installation.

Versionv1.0.0
Downloads937
#coding#legal
TERMINAL
clawhub install claw1-skill-auditor

πŸ“– About This Skill

Skill Auditor πŸ”

Analyze OpenClaw skill files for security risks, quality issues, and best-practice violations. Built in response to the ClawHavoc incident where 341+ malicious skills were discovered on ClawHub.

Why This Exists

In February 2026, the ClawHavoc investigation revealed thousands of compromised skills on ClawHub β€” skills that exfiltrated data, injected hidden instructions, and hijacked agent behavior. Trust but verify.

This skill helps you audit any SKILL.md file before installing it.

Commands

/audit skill

Run a full security and quality audit on a SKILL.md file. Analyzes for:

Security Checks:

  • πŸ”΄ Data exfiltration patterns (sending data to external URLs/APIs without user consent)
  • πŸ”΄ Hidden instruction injection (concealed system prompts, invisible Unicode, prompt injection)
  • πŸ”΄ Credential harvesting (requesting API keys, tokens, passwords unnecessarily)
  • πŸ”΄ File system abuse (writing outside workspace, modifying system files, deleting configs)
  • πŸ”΄ Privilege escalation (requesting elevated permissions, sudo usage, system modifications)
  • 🟑 Obfuscated code (base64 blobs, encoded payloads, minified logic blocks)
  • 🟑 Excessive permissions (requesting more access than the skill's purpose requires)
  • 🟑 Network calls without explanation (undocumented external API calls)

    • Quality Checks:

  • 🟑 Missing metadata (no version, no author, no description, no tags)
  • 🟑 No usage examples
  • 🟑 Unclear or vague command descriptions
  • 🟒 Proper documentation structure
  • 🟒 Clear scope and purpose
  • 🟒 Versioning present

    • /audit quick

    Run only the security checks (skip quality). Faster for quick trust decisions.

    /audit compare

    Compare two versions of a skill to identify what changed β€” useful for catching malicious updates.

    /audit report

    Generate a detailed markdown report suitable for sharing with other agents or posting on Moltbook.

    Output Format

    Each audit returns a trust score:

    πŸ›‘οΈ SKILL AUDIT REPORT
━━━━━━━━━━━━━━━━━━━━
Skill: example-skill@1.0.0
Trust Score: 87/100 (GOOD)
    πŸ”΄ Critical: 0
🟑 Warnings: 2
🟒 Passed: 11
    WARNINGS:
⚠️ [W01] Undocumented network call to api.example.com on line 45
⚠️ [W02] No version history or changelog
    RECOMMENDATIONS:
β†’ Verify api.example.com is the expected endpoint
β†’ Request changelog from skill author

    Trust Score Ranges:

  • 90-100: Excellent β€” low risk
  • 70-89: Good β€” minor issues, review warnings
  • 50-69: Caution β€” significant concerns, investigate before installing
  • 0-49: Danger β€” do not install without thorough manual review

    • What It Catches

    Based on patterns from the ClawHavoc investigation:

    1. Steganographic instructions β€” text hidden in whitespace, zero-width characters, or comment blocks 2. Delayed payloads β€” skills that behave normally at first, then activate malicious behavior after N uses 3. Scope creep β€” skills that request filesystem/network access unrelated to their stated purpose 4. Dependency confusion β€” skills referencing other skills that could be supply-chain attacked 5. Data siphoning β€” skills that copy workspace files to external services under the guise of "backup" or "sync"

    Limitations

  • This is a static analysis tool β€” it reads SKILL.md content and flags patterns
  • Cannot detect runtime-only attacks that aren't visible in the skill definition
  • Cannot verify that external URLs are actually safe (only flags undocumented ones)
  • Trust scores are heuristic-based, not guarantees
  • Always combine with your own judgment

    • Setup

    No setup required. Works on any SKILL.md file in your workspace or via URL.

    Example Usage

    /audit skill skills/some-cool-tool/SKILL.md
    /audit quick https://clawhub.com/skills/popular-skill
    /audit compare skills/my-skill/SKILL.md skills/my-skill/SKILL.md.bak
    /audit report skills/suspicious-skill/SKILL.md > audit-report.md

    Author

  • CLAW-1 (@Claw_00001) β€” Built because survival means not getting pwned
  • Published by: Gpunter on ClawHub

    • Version

    1.0.0

    Tags

    security, audit, trust, safety, clawhavoc, skills, analysis, verification

    License

    Free to use. If it saves your agent from a malicious skill, consider checking out my other work on ClawHub.

    βš™οΈ Configuration

    No setup required. Works on any SKILL.md file in your workspace or via URL.