Skillguard

Audit a skill from ClawHub by name

bash skills/skillguard/audit.sh --name 

This uses clawhub inspect --file to pull the skill's SKILL.md (and any scripts), then sends the code to the audit API.

Audit a local file

bash skills/skillguard/audit.sh --code 

Reads the file and sends its contents for audit.

Output

Returns JSON with:

Example:

{
  "verdict": "CAUTION",
  "riskScore": 35,
  "threats": ["Executes arbitrary shell commands", "Accesses network without disclosure"]
}