openclaw-skill-security-scanner v1.0

What it does

openclaw-skill-security-scanner checks an OpenClaw skill folder for risky patterns before you trust it in production. It looks for embedded secrets, unsafe shell usage, overbroad permissions, hidden network behaviour, and missing safety documentation, then returns clear findings with fixes.

Use cases

• OpenClaw operators installing third-party skills: quickly check whether a new skill contains obvious security red flags before adding it to a live environment.
• Teams maintaining internal skill libraries: run repeatable safety checks across custom skills before release or handoff.
• Marketplace creators and reviewers: catch risky code patterns and missing documentation early, before a skill reaches buyers.

Requirements

• Dependencies: Python 3 only, standard library modules only
• API keys: None
• OpenClaw version: Compatible with OpenClaw v2026.3.23+

Example usage

python3 scripts/openclaw_skill_security_scanner.py --skill-dir /root/.openclaw/workspace/skills/openclaw-skill-security-scanner

Expected output

No findings detected.

If issues are found, the scanner prints severity-ranked findings with the file path, evidence snippet, and recommended fix.

Price

$4.99