---
name: custom-skill-scanner
description: OpenClaw skill for governed agent workflows.
---
custom-skill-scanner
Description
Vet third-party OpenClaw skills for suspicious patterns like embedded secrets, obfuscated code, risky shell execution, and missing documentation before install or release.
Usage
Run the main script directly:
```bash
python3 scripts/custom_skill_scanner.py --skill-dir /path/to/skill
```
Parameters
→ `--skill-dir`: Path to the skill directory to inspect.
→ `--json`: Output the scan report as JSON.
→ `--fail-on-high`: Exit with status 2 if any HIGH severity findings are present.
→ `--max-file-kb`: Skip text files larger than this many KB while scanning.
Output
Prints a security scan report with suspicious files, severity-ranked findings, and remediation guidance.
Release evidence
Reviewed in the 2026-06-15 GetAgentIQ warehouse propagation cycle.