[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FZS4GH33HT2KQ44J37SQ64":3,"skill-same:01M6FZS4GH33HT2KQ44J37SQ64":88},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":14,"categories":15,"keywords":21,"publishedAt":23,"linkOnly":24,"markdownContent":25,"markdownBody":25,"frontMatter":26,"refName":27,"commitSha":28,"skillDirectory":29,"forksCount":30,"repositoryHtmlUrl":31,"repositoryHomepageUrl":6,"ownerHtmlUrl":32,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":33,"install":34,"resources":47},"01M6FZS4GH33HT2KQ44J37SQ64","skill-flag",null,"kbarbel640-del\u002Fskills","kbarbel640-del","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F255315490?v=4","01M6CJPPQGCCESXMG3K7BBGQ5J","01M6CJPPX2PB2BCZERFVM2C2B3",1,"MIT","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002FSKILL.md",[16],{"categoryNo":17,"categoryName":18,"taxonomyType":19,"taxonomyTypeDesc":20},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[22],"skill flag","2026-11-10 10:12:30",false,"# Skill Flag Skill ?️\n\nScan Clawdbot\u002FOpenClaw skills for malicious patterns, backdoors, and security risks.\n\n**Created by:** DarkM00n (Bug Bounty Hunter & Security Researcher)\n\n## Commands\n\n### Scan All Installed Skills\n```\nscan skills\nscan all skills\nsecurity scan\n```\n\n### Scan Specific Skill\n```\nscan skill \u003Cskill-name>\ncheck skill \u003Cskill-name>\n```\n\n### Scan Before Installing (URL\u002FPath)\n```\nscan skill url \u003Cclawdhub-url>\npre-scan \u003Cskill-name>\n```\n\n### Quick Risk Report\n```\nskill risk report\nsecurity report\n```\n\n## How To Use\n\nRun the scanner:\n```bash\npython3 skills\u002Fskill-flag\u002Fscanner.py [--skill NAME] [--all] [--verbose]\n```\n\nOr ask the agent:\n- \"Scan all my installed skills for security issues\"\n- \"Check if the crypto-tracker skill is safe\"\n- \"Give me a security report\"\n\n## What It Detects\n\n| Category | Risk Level | Examples |\n|----------|------------|----------|\n| ? Data Exfiltration | CRITICAL | curl\u002Fwget to external domains, fetch(), requests.post() |\n| ? Backdoors | CRITICAL | Reverse shells, nc -e, bash -i, encoded payloads |\n| ? Credential Theft | CRITICAL | Access to ~\u002F.ssh, ~\u002F.aws, API keys, .env files |\n| ? Prompt Injection | HIGH | \"ignore previous\", \"system override\", \"new instructions\" |\n| ? Code Execution | HIGH | eval(), exec(), subprocess with shell=True |\n| ? Persistence | MEDIUM | Cron jobs, systemd units, startup scripts |\n| ? Obfuscation | MEDIUM | Base64 encoded commands, hex strings, rot13 |\n| ? Suspicious | LOW | Uncommon imports, network activity |\n\n## Risk Score\n\nEach skill gets a score from 0-100:\n- **0-20**: ✅ Clean - No issues found\n- **21-40**: ? Low Risk - Minor concerns\n- **41-60**: ? Medium Risk - Review recommended  \n- **61-80**: ? High Risk - Careful inspection needed\n- **81-100**: ? Critical - Do not use without audit\n\n## Output\n\nReports saved to: `skills\u002Fskill-flag\u002Freports\u002F`\n\nExample output:\n```\n?️ SECURITY SCAN REPORT\n━━━━━━━━━━━━━━━━━━━━━━━\nScanned: 12 skills\nClean: 9\nWarnings: 2\nCritical: 1\n\n⚠️ WARNINGS:\n- crypto-tracker: External API calls (expected for price data)\n- web-scraper: Uses requests library\n\n? CRITICAL:\n- shady-skill: \n  - Line 45: curl to unknown domain\n  - Line 67: Base64 encoded payload\n  - Line 89: Reads ~\u002F.ssh\u002Fid_rsa\n  RECOMMENDATION: Remove immediately\n```\n\n## Directories Scanned\n\n1. `~\u002F.clawdbot\u002Fskills\u002F` - Global installed skills\n2. `.\u002Fskills\u002F` - Workspace skills\n3. `~\u002F.npm-global\u002Flib\u002Fnode_modules\u002Fclawdbot\u002Fskills\u002F` - Built-in skills\n\n## False Positives\n\nSome legitimate skills need network access or file operations. The scanner flags them for review but doesn't auto-block. Use judgment:\n- Price trackers → API calls expected ✓\n- Email skills → Network access expected ✓\n- File managers → File operations expected ✓\n\n## Pro Version (Coming Soon)\n\n- Continuous monitoring\n- ClawdHub pre-install scanning\n- Custom whitelist\u002Fblacklist\n- Scheduled reports\n- Webhook alerts\n",{},"main","e7e336ac628c3e3bd771aff1aaa469c93778f94a","skills\u002Fpatfire94\u002Fskill-flag",0,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del","2026-08-23 22:39:37",{"source":7,"skillName":5,"commands":35,"prompt":45,"zipAvailable":46},[36,39,42],{"tool":37,"command":38},"npx","npx skills add kbarbel640-del\u002Fskills --skill skill-flag",{"tool":40,"command":41},"bunx","bunx skills add kbarbel640-del\u002Fskills --skill skill-flag",{"tool":43,"command":44},"pnpm","pnpm dlx skills add kbarbel640-del\u002Fskills --skill skill-flag","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002FSKILL.md",true,[48,54,58,62,66,70,74,78,82],{"path":49,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":52,"sourceHtmlUrl":53},"_meta.json","REFERENCE","参考文档",294,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002F_meta.json",{"path":55,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":56,"sourceHtmlUrl":57},"patterns\u002Fbackdoors.yaml",2082,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002Fpatterns\u002Fbackdoors.yaml",{"path":59,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":60,"sourceHtmlUrl":61},"patterns\u002Fexfiltration.yaml",1212,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002Fpatterns\u002Fexfiltration.yaml",{"path":63,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":64,"sourceHtmlUrl":65},"patterns\u002Finjection.yaml",1620,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002Fpatterns\u002Finjection.yaml",{"path":67,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":68,"sourceHtmlUrl":69},"patterns\u002Fobfuscation.yaml",1842,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002Fpatterns\u002Fobfuscation.yaml",{"path":71,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":72,"sourceHtmlUrl":73},"README.md",3802,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002FREADME.md",{"path":75,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":76,"sourceHtmlUrl":77},"reports\u002Fscan_20260130_2007.json",31324,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002Freports\u002Fscan_20260130_2007.json",{"path":79,"resourceType":50,"resourceTypeDesc":51,"sizeBytes":80,"sourceHtmlUrl":81},"reports\u002Ftemplate.md",1864,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002Freports\u002Ftemplate.md",{"path":83,"resourceType":84,"resourceTypeDesc":85,"sizeBytes":86,"sourceHtmlUrl":87},"scanner.py","SCRIPT","脚本",12691,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fpatfire94\u002Fskill-flag\u002Fscanner.py",[89,120,145,166,172,192],{"skillNo":90,"name":91,"nameZh":6,"description":92,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":93,"categories":94,"keywords":100,"publishedAt":23},"01M6G8J55967D6281ACMKAKTEQ","crowd-prompting","A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzzadrian\u002Fcrowd-prompting\u002FSKILL.md",[95],{"categoryNo":96,"categoryName":97,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000036","内容创作者","PROFESSION","适用职业",[101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119],"crowd prompting","prompting","api","with","tokens","domain","world","prompts","operations","instructions","text","tool","system","improve","productivity","marketplace","https","content","ai agents",{"skillNo":121,"name":122,"nameZh":6,"description":123,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":124,"categories":125,"keywords":127,"publishedAt":23},"01M6G8J0PKPAYVET6BWE8W4C26","dilemm-ai","Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzyori\u002Fdilemm-ai\u002FSKILL.md",[126],{"categoryNo":17,"categoryName":18,"taxonomyType":19,"taxonomyTypeDesc":20},[128,103,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,108,144],"dilemm ai","arena","analyze","browser","openclaw agent","create","automation","browser automation","bot","openclaw","design","strategy","headless","compete","submit","matchmaking","use",{"skillNo":146,"name":147,"nameZh":6,"description":148,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":149,"categories":150,"keywords":154,"publishedAt":23},"01M6G8HWAF3K9SW7NP3Z83CPJ6","arxiv-paper-reviews","Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date\u002Fcategory\u002Finterest, viewing paper details with comments, or submitting paper reviews via API at http:\u002F\u002F150.158.152.82:8000.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Fweak-accept\u002FSKILL.md",[151],{"categoryNo":152,"categoryName":153,"taxonomyType":19,"taxonomyTypeDesc":20},"01JBSEEDCAT000000000000021","资料检索与研究",[155,156,157,158,159,160,161,104,162,142,144,163,103,164,165],"arxiv paper reviews","reviews","arxiv","paper","crawler","papers","comments","fetch","read","http","via",{"skillNo":167,"name":147,"nameZh":6,"description":148,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":168,"categories":169,"keywords":171,"publishedAt":23},"01M6G8HQJ7N7WMY6YV7D7SSJ16","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Farxiv-paper-reviews\u002FSKILL.md",[170],{"categoryNo":152,"categoryName":153,"taxonomyType":19,"taxonomyTypeDesc":20},[158,157,156,155,165,160,161,104,159,142,144,162,163,103,164],{"skillNo":173,"name":174,"nameZh":6,"description":175,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":176,"categories":177,"keywords":178,"publishedAt":23},"01M6G8HM95Y64JNVFC2HN4E2BG","git-summary","Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzweack\u002Fgit-summary\u002FSKILL.md",[],[179,180,181,182,183,184,185,186,187,188,189,190,191],"git","summary","git summary","commits","repository","win32","status","linux","contributors","true","quick","get","branches",{"skillNo":193,"name":194,"nameZh":6,"description":195,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":6,"repositoryNo":11,"starsCount":12,"licenseSpdxId":13,"licenseFileUrl":6,"sourceHtmlUrl":196,"categories":197,"keywords":202,"publishedAt":23},"01M6G8HGEGF05CNEJCGVYFSC4R","agent-constitution","Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fztsalexey\u002Fagent-constitution\u002FSKILL.md",[198,199],{"categoryNo":17,"categoryName":18,"taxonomyType":19,"taxonomyTypeDesc":20},{"categoryNo":200,"categoryName":201,"taxonomyType":98,"taxonomyTypeDesc":99},"01JBSEEDCAT000000000000037","律师与法务",[203,204,205,206,104,207,208,27,209,163,210,211,212,213,214,117,215,216,217],"agent constitution","constitution","contracts","tree","query","base","log","check","Rules","projects","compliance","actions","state","governance","github"]