[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FN4GFK6PB76T7VRD2TX64C":3,"skill-same:01M6FN4GFK6PB76T7VRD2TX64C":75},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":14,"categories":15,"keywords":21,"publishedAt":26,"linkOnly":27,"markdownContent":28,"markdownBody":28,"frontMatter":29,"refName":30,"commitSha":31,"skillDirectory":32,"forksCount":33,"repositoryHtmlUrl":34,"repositoryHomepageUrl":6,"ownerHtmlUrl":35,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":36,"install":37,"resources":50},"01M6FN4GFK6PB76T7VRD2TX64C","openclaw-skill-scanner",null,"kbarbel640-del\u002Fskills","kbarbel640-del","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F255315490?v=4","01M6CJPPQGCCESXMG3K7BBGQ5J","01M6CJPPX2PB2BCZERFVM2C2B3",1,"MIT","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fepwhesq\u002Fopenclaw-skill-scanner\u002FSKILL.md",[16],{"categoryNo":17,"categoryName":18,"taxonomyType":19,"taxonomyTypeDesc":20},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[22,23,24,25],"openclaw","skill scanner","scanner","openclaw skill scanner","2026-11-10 10:12:30",false,"# Skill Scanner\n\n**Name:** skill-scanner\n**Version:** 1.0.0\n**Author:** vrtlly.us\n**Category:** Security\n\n## Description\n\nScans ClawHub skills for malicious patterns before and after installation. Detects base64 payloads, reverse shells, data exfiltration, crypto miners, obfuscated URLs, and more.\n\n## Usage\n\n### Scan all installed skills\n```bash\npython3 scanner.py\n```\n\n### Scan a specific skill\n```bash\npython3 scanner.py --skill \u003Cskill-name>\n```\n\n### Scan a specific file\n```bash\npython3 scanner.py --file \u003Cpath-to-file>\n```\n\n### Pre-install scan (download → scan → report → cleanup)\n```bash\npython3 scanner.py --pre-install \u003Cclawhub-slug>\n```\n\n### JSON output\n```bash\npython3 scanner.py --json\npython3 scanner.py --skill \u003Cname> --json\n```\n\n### Safe install hook\n```bash\nbash install-hook.sh \u003Cclawhub-slug>\nbash install-hook.sh \u003Cclawhub-slug> --force\n```\n\n## Detection Patterns\n\n| Category | What it catches |\n|---|---|\n| Base64 payloads | Long base64 strings near exec\u002Fbash\u002Feval |\n| Pipe to shell | `curl ... \\| bash`, `wget ... \\| sh` |\n| Raw IP connections | `http:\u002F\u002F1.2.3.4` style URLs |\n| Dangerous functions | `eval()`, `exec()`, `os.system()`, `subprocess(shell=True)` |\n| Hidden files | Dotfile creation in unexpected places |\n| Env exfiltration | Reading `.env`, API keys sent outbound |\n| Obfuscated URLs | rentry.co, pastebin, hastebin redirectors |\n| Fake dependencies | References to non-existent packages |\n| Data exfil endpoints | webhook.site, requestbin, etc. |\n| Crypto mining | xmrig, stratum, mining pool references |\n| Password archives | Password-protected zip\u002Ftar downloads |\n\n## Risk Scores\n\n- **0-29 (Green):** Clean — no suspicious patterns found\n- **30-69 (Yellow):** Suspicious — review warnings before use\n- **70-100 (Red):** Dangerous — likely malicious, do not install\n\n## Files\n\n- `scanner.py` — Main scanner engine\n- `install-hook.sh` — Safe installation wrapper\n- `whitelist.json` — Known-good and known-bad skill lists\n- `report-template.md` — Markdown report template\n",{},"main","e7e336ac628c3e3bd771aff1aaa469c93778f94a","skills\u002Fepwhesq\u002Fopenclaw-skill-scanner",0,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del","2026-08-23 22:39:37",{"source":7,"skillName":5,"commands":38,"prompt":48,"zipAvailable":49},[39,42,45],{"tool":40,"command":41},"npx","npx skills add kbarbel640-del\u002Fskills --skill openclaw-skill-scanner",{"tool":43,"command":44},"bunx","bunx skills add kbarbel640-del\u002Fskills --skill openclaw-skill-scanner",{"tool":46,"command":47},"pnpm","pnpm dlx skills add kbarbel640-del\u002Fskills --skill openclaw-skill-scanner","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fepwhesq\u002Fopenclaw-skill-scanner\u002FSKILL.md",true,[51,57,63,67,71],{"path":52,"resourceType":53,"resourceTypeDesc":54,"sizeBytes":55,"sourceHtmlUrl":56},"_meta.json","REFERENCE","参考文档",297,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fepwhesq\u002Fopenclaw-skill-scanner\u002F_meta.json",{"path":58,"resourceType":59,"resourceTypeDesc":60,"sizeBytes":61,"sourceHtmlUrl":62},"install-hook.sh","SCRIPT","脚本",10748,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fepwhesq\u002Fopenclaw-skill-scanner\u002Finstall-hook.sh",{"path":64,"resourceType":53,"resourceTypeDesc":54,"sizeBytes":65,"sourceHtmlUrl":66},"report-template.md",970,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fepwhesq\u002Fopenclaw-skill-scanner\u002Freport-template.md",{"path":68,"resourceType":59,"resourceTypeDesc":60,"sizeBytes":69,"sourceHtmlUrl":70},"scanner.py",33259,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fepwhesq\u002Fopenclaw-skill-scanner\u002Fscanner.py",{"path":72,"resourceType":53,"resourceTypeDesc":54,"sizeBytes":73,"sourceHtmlUrl":74},"whitelist.json",1079,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fepwhesq\u002Fopenclaw-skill-scanner\u002Fwhitelist.json",[76,107,131,152,158,178],{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":80,"categories":81,"keywords":87,"publishedAt":26},"01M6G8J55967D6281ACMKAKTEQ","crowd-prompting","A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzzadrian\u002Fcrowd-prompting\u002FSKILL.md",[82],{"categoryNo":83,"categoryName":84,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000036","内容创作者","PROFESSION","适用职业",[88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106],"crowd prompting","prompting","api","with","tokens","domain","world","prompts","operations","instructions","text","tool","system","improve","productivity","marketplace","https","content","ai agents",{"skillNo":108,"name":109,"nameZh":6,"description":110,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":111,"categories":112,"keywords":114,"publishedAt":26},"01M6G8J0PKPAYVET6BWE8W4C26","dilemm-ai","Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzyori\u002Fdilemm-ai\u002FSKILL.md",[113],{"categoryNo":17,"categoryName":18,"taxonomyType":19,"taxonomyTypeDesc":20},[115,90,116,117,118,119,120,121,122,123,22,124,125,126,127,128,129,95,130],"dilemm ai","arena","analyze","browser","openclaw agent","create","automation","browser automation","bot","design","strategy","headless","compete","submit","matchmaking","use",{"skillNo":132,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":135,"categories":136,"keywords":140,"publishedAt":26},"01M6G8HWAF3K9SW7NP3Z83CPJ6","arxiv-paper-reviews","Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date\u002Fcategory\u002Finterest, viewing paper details with comments, or submitting paper reviews via API at http:\u002F\u002F150.158.152.82:8000.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Fweak-accept\u002FSKILL.md",[137],{"categoryNo":138,"categoryName":139,"taxonomyType":19,"taxonomyTypeDesc":20},"01JBSEEDCAT000000000000021","资料检索与研究",[141,142,143,144,145,146,147,91,148,128,130,149,90,150,151],"arxiv paper reviews","reviews","arxiv","paper","crawler","papers","comments","fetch","read","http","via",{"skillNo":153,"name":133,"nameZh":6,"description":134,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":154,"categories":155,"keywords":157,"publishedAt":26},"01M6G8HQJ7N7WMY6YV7D7SSJ16","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Farxiv-paper-reviews\u002FSKILL.md",[156],{"categoryNo":138,"categoryName":139,"taxonomyType":19,"taxonomyTypeDesc":20},[144,143,142,141,151,146,147,91,145,128,130,148,149,90,150],{"skillNo":159,"name":160,"nameZh":6,"description":161,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":162,"categories":163,"keywords":164,"publishedAt":26},"01M6G8HM95Y64JNVFC2HN4E2BG","git-summary","Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzweack\u002Fgit-summary\u002FSKILL.md",[],[165,166,167,168,169,170,171,172,173,174,175,176,177],"git","summary","git summary","commits","repository","win32","status","linux","contributors","true","quick","get","branches",{"skillNo":179,"name":180,"nameZh":6,"description":181,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":182,"categories":183,"keywords":188,"publishedAt":26},"01M6G8HGEGF05CNEJCGVYFSC4R","agent-constitution","Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fztsalexey\u002Fagent-constitution\u002FSKILL.md",[184,185],{"categoryNo":17,"categoryName":18,"taxonomyType":19,"taxonomyTypeDesc":20},{"categoryNo":186,"categoryName":187,"taxonomyType":85,"taxonomyTypeDesc":86},"01JBSEEDCAT000000000000037","律师与法务",[189,190,191,192,91,193,194,30,195,149,196,197,198,199,200,104,201,202,203],"agent constitution","constitution","contracts","tree","query","base","log","check","Rules","projects","compliance","actions","state","governance","github"]