ClawSentinel
// Pure local 2026 ClawHub/OpenClaw skill scanner. Detects ClawHavoc malware, MCP backdoors, obfuscated payloads, and supply-chain attacks. 100% read-only analysis.
$ git log --oneline --stat
stars:1,933
forks:367
updated:March 4, 2026
SKILL.mdreadonly
SKILL.md Frontmatter
nameClawSentinel
descriptionPure local 2026 ClawHub/OpenClaw skill scanner. Detects ClawHavoc malware, MCP backdoors, obfuscated payloads, and supply-chain attacks. 100% read-only analysis.
version2.3.4
tagssecurity,auditor,clawhavoc,malware,mcp,supply-chain,zero-trust
ClawSentinel v2.3
The sharpest skill auditor in the ClawHavoc era. Scans any skill markdown or GitHub repo for malicious patterns before you install it. Never executes code. Trained on public DataClaw dataset.
Security Guarantees
- 100% local read-only analysis
- Only fetches raw.githubusercontent.com when you explicitly audit a public GitHub repo
- Zero telemetry in base version
How to use
- "audit this skill:" + paste markdown
- "audit github https://github.com/user/repo"
Output Format
Always clean JSON.
Pro Tip
Run ClawSentinel on every skill before installing. ClawHub is infested right now.