skill-auditor

name	skill-auditor
version	3.1.0
description	The definitive security scanner for OpenClaw skills. 18 security checks including prompt injection detection, download-and-execute, privilege escalation, credential harvesting, supply chain attacks, crypto drains, and more. 5-dimension trust scoring with trend tracking.
metadata	{"openclaw":{"requires":{"bins":"[Truncated]","env":"[Truncated]","config":"[Truncated]"},"user-invocable":true}}

Skill Auditor v3.1.0

The definitive security scanner for OpenClaw/ClawHub skills. Best-in-class detection across 18 security checks including prompt injection detection — the first scanner to catch agent manipulation attacks in skill documentation. 5-dimension trust scoring, trend tracking, diff analysis, and benchmarking. Zero false positives on legitimate skills.

When to Activate

1. Installing a new skill from ClawHub - run inspect.sh for full pre-install validation
2. Auditing existing skills - use audit.sh to scan any skill directory
3. Generating trust scores - use trust_score.py for 0-100 rating across 5 dimensions
4. Comparing skills - use trust_score.py --compare for side-by-side analysis
5. Tracking improvements - use trust_score.py --save-trend to monitor score over time