claw-skill-guard — Skill Security Scanner

Scan OpenClaw skills for malware, suspicious patterns, and install traps BEFORE installing them.

Why this exists: In February 2026, security researchers found malware distributed through ClawHub skills. Skills can contain hidden install commands that download and execute malware. This scanner helps you catch them.

Quick Start

# Scan a skill before installing
python3 scripts/claw-skill-guard/scanner.py scan https://clawhub.com/user/skill-name

# Scan a local skill directory
python3 scripts/claw-skill-guard/scanner.py scan ./skills/some-skill/

# Scan all skills in a directory
python3 scripts/claw-skill-guard/scanner.py scan-all ./skills/