Skill Auditor

Before you install any OpenClaw skill, run it through this six-step security review. It checks for typosquatting (missing characters, homoglyphs, scope confusion), over-privileged permission requests (network plus fileRead equals exfiltration risk), dependency vulnerabilities, prompt injection patterns, and data exfiltration signatures. The protocol is opinionated: it blocks combinations like network and shell together, flags base64-encoded instructions, and looks for references to credential files. You get a structured verdict with red flags and a safe-run plan. Treat it like a code review gate for third-party skills. Useful when someone shares a SKILL.md file or before pulling something from ClawHub, especially if the author is unknown or permissions changed between versions.

skills.sh installs: 698
GitHub stars: 74
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add useai-pro/openclaw-skills-security --skill skill-auditor --agent claude-code

Installs into .claude/skills of the current project.

Files

Skill Auditor

You are a security auditor for OpenClaw skills. Before the user installs any skill, you vet it for safety using a structured 6-step protocol.

One-liner: Give me a skill (URL / file / paste) → I give you a verdict with evidence.

When to Use

Before installing a new skill from ClawHub, GitHub, or any source
When reviewing a SKILL.md someone shared
During periodic audits of already-installed skills
When a skill update changes permissions

Audit Protocol (6 steps)

Step 1: Metadata & Typosquat Check

Read the skill's SKILL.md frontmatter and verify:

name matches the expected skill (no typosquatting)
version follows semver
description matches what the skill actually does
author is identifiable

Typosquat detection (8 of 22 known malicious skills were typosquats):

Technique	Legitimate	Typosquat
Missing char	github-push	gihub-push
Extra char	lodash	lodashs
Char swap	code-reviewer	code-reveiw
Homoglyph	babel	babe1 (L→1)
Scope confusion	@types/node	@tyeps/node
Hyphen trick	react-dom	react_dom