
useai-pro/openclaw-skills-security
2 skills19.8k installs124 starsGitHub
Install
npx skills add https://github.com/useai-pro/openclaw-skills-securitySkills in this repo
1Skill VetterSkill Vetter is a security-first OpenClaw agent skill that makes your coding agent behave like a pre-install auditor for third-party skills. Solo builders expanding ClawHub or GitHub skill libraries invoke it before dropping a new SKILL.md into production agents, when someone shares an unverified package, or during periodic reviews of installed capabilities. The workflow walks metadata inspection and a structured red-flag protocol: permission scope, suspicious patterns, and instructions that exceed stated intent. It is positioned as a conservative, manual-first alternative for operators who want explicit install-or-block reasoning rather than assuming marketplace safety. The module metadata documents file-read only without shell, network, or write—matching a review-only posture. Pair it with Prism’s on-page Security Audits for supply-chain context; this skill does not replace dependency scanning of the underlying repo.19.2kinstalls2Skill AuditorSkill Auditor is a pre-install security checker for OpenClaw skills. Solo and indie builders who pull skills from registries or repos can invoke it to decide whether a package is safe to enable, sandbox, or block—without relying on stars or reputation alone. The skill walks through six structured steps covering metadata, permissions, dependencies, injection patterns, and data-exfiltration signals, then emits a severity-weighted audit report with an install verdict. It fits the moment you are about to add a new capability to Claude Code, Cursor, Codex, or OpenClaw, and again when an update widens file, network, or shell access. The workflow is read-only on your side (no network or shell required from the auditor itself), which keeps the review reproducible. Use it as evidence for sandboxing decisions and to document why you rejected a skill before it ever ran in production credentials.581installs