openclaw-skill-scanner
// **Name:** skill-scanner
$ git log --oneline --stat
stars:1,933
forks:367
updated:March 4, 2026
SKILL.mdreadonly
Skill Scanner
Name: skill-scanner Version: 1.0.0 Author: vrtlly.us Category: Security
Description
Scans ClawHub skills for malicious patterns before and after installation. Detects base64 payloads, reverse shells, data exfiltration, crypto miners, obfuscated URLs, and more.
Usage
Scan all installed skills
python3 scanner.py
Scan a specific skill
python3 scanner.py --skill <skill-name>
Scan a specific file
python3 scanner.py --file <path-to-file>
Pre-install scan (download → scan → report → cleanup)
python3 scanner.py --pre-install <clawhub-slug>
JSON output
python3 scanner.py --json
python3 scanner.py --skill <name> --json
Safe install hook
bash install-hook.sh <clawhub-slug>
bash install-hook.sh <clawhub-slug> --force
Detection Patterns
| Category | What it catches |
|---|---|
| Base64 payloads | Long base64 strings near exec/bash/eval |
| Pipe to shell | curl ... | bash, wget ... | sh |
| Raw IP connections | http://1.2.3.4 style URLs |
| Dangerous functions | eval(), exec(), os.system(), subprocess(shell=True) |
| Hidden files | Dotfile creation in unexpected places |
| Env exfiltration | Reading .env, API keys sent outbound |
| Obfuscated URLs | rentry.co, pastebin, hastebin redirectors |
| Fake dependencies | References to non-existent packages |
| Data exfil endpoints | webhook.site, requestbin, etc. |
| Crypto mining | xmrig, stratum, mining pool references |
| Password archives | Password-protected zip/tar downloads |
Risk Scores
- 0-29 (Green): Clean — no suspicious patterns found
- 30-69 (Yellow): Suspicious — review warnings before use
- 70-100 (Red): Dangerous — likely malicious, do not install
Files
scanner.py— Main scanner engineinstall-hook.sh— Safe installation wrapperwhitelist.json— Known-good and known-bad skill listsreport-template.md— Markdown report template