[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6G3JCBRSECHTXSNR4W4S3XX":3,"skill-same:01M6G3JCBRSECHTXSNR4W4S3XX":85},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":43,"linkOnly":44,"markdownContent":45,"markdownBody":46,"frontMatter":47,"refName":48,"commitSha":49,"skillDirectory":50,"forksCount":51,"repositoryHtmlUrl":52,"repositoryHomepageUrl":6,"ownerHtmlUrl":53,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":54,"install":55,"resources":68},"01M6G3JCBRSECHTXSNR4W4S3XX","skill-defender",null,"Scans installed OpenClaw skills for malicious patterns including prompt injection, credential theft, data exfiltration, obfuscated payloads, and backdoors. Use when installing new skills, after skill updates, or for periodic security scans. Runs deterministic pattern matching — fast, offline, no API cost.","kbarbel640-del\u002Fskills","kbarbel640-del","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F255315490?v=4","01M6CJPPQGCCESXMG3K7BBGQ5J","01M6CJPPX2PB2BCZERFVM2C2B3",1,"MIT","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fsnail3d\u002Fclawd\u002Fskills\u002Fskill-defender\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42],"defender","skill defender","payloads","pattern matching","matching","pattern","deterministic","credential","cost","periodic","use","prompt injection","prompt","api","injection","data","exfiltration","fast","offline","malicious","2026-11-10 10:12:30",false,"---\nname: skill-defender\ndescription: Scans installed OpenClaw skills for malicious patterns including prompt injection, credential theft, data exfiltration, obfuscated payloads, and backdoors. Use when installing new skills, after skill updates, or for periodic security scans. Runs deterministic pattern matching — fast, offline, no API cost.\n---\n\n# Skill Defender — Malicious Pattern Scanner\n\n## When to Run\n\n### Automatic Triggers\n1. **New skill installed** — Immediately run `scan_skill.py` against it before allowing use\n2. **Skill updated** — Re-scan after any file changes in a skill directory\n3. **Periodic audit** — Run batch scan on all installed skills when requested\n\n### Manual Triggers\n- User says \"scan skill X\" → scan that specific skill\n- User says \"scan all skills\" → batch scan all skills\n- User says \"security check\" or \"audit skills\" → same as above\n\n## Scripts\n\n### `scripts\u002Fscan_skill.py` — Single Skill Scanner\nScans one skill directory for malicious patterns. Produces JSON or human-readable output.\n\n### `scripts\u002Faggregate_scan.py` — Batch Scanner\nScans ALL installed skills and produces a single JSON report. Includes a built-in allowlist to reduce false positives from security-related skills, API skills, and other known-safe patterns.\n\n## How to Run\n\n```bash\n# Scan a single skill (human-readable)\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir\n\n# Scan a single skill (JSON output)\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir --json\n\n# Scan ALL installed skills (JSON aggregate report)\npython3 scripts\u002Faggregate_scan.py\n\n# With custom skills directory\npython3 scripts\u002Faggregate_scan.py --skills-dir \u002Fpath\u002Fto\u002Fskills\n\n# With verbose warnings\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir --verbose\n\n# Exclude false positives\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir --exclude \"pattern1\" \"pattern2\"\n```\n\n### Exit Codes (scan_skill.py)\n- `0` = clean or informational only\n- `1` = suspicious (medium\u002Fhigh findings)\n- `2` = dangerous (critical findings)\n- `3` = error\n\n### Output Format (aggregate_scan.py)\n\n```json\n{\n  \"skills\": [\n    {\n      \"name\": \"skill-name\",\n      \"verdict\": \"clean|suspicious|dangerous|error\",\n      \"findingsCount\": 0,\n      \"findings\": []\n    }\n  ],\n  \"summary\": \"All 37 skills passed with no significant issues.\",\n  \"totalSkills\": 37,\n  \"cleanCount\": 37,\n  \"suspiciousCount\": 0,\n  \"dangerousCount\": 0,\n  \"errorCount\": 0,\n  \"timestamp\": \"2026-02-02T06:00:00+00:00\"\n}\n```\n\n## Auto-Detection\n\nBoth scripts auto-detect paths:\n- **Skills directory**: Detected from script location (walks up to find `skills\u002F` parent), falls back to `~\u002Fclawd\u002Fskills`, `~\u002Fskills`, `~\u002F.openclaw\u002Fskills`\n- **Scanner script**: `aggregate_scan.py` finds `scan_skill.py` co-located in the same directory\n\n## Handling Results\n\n### ✅ Clean (`verdict: \"clean\"`)\n- No action needed — skill is safe\n\n### ⚠️ Suspicious (`verdict: \"suspicious\"`)\n- Warn the user with a summary of findings\n- Show the category and severity of each finding\n\n### ? Dangerous (`verdict: \"dangerous\"`)\n- Block the skill — do not proceed with installation or use\n- Show the full detailed findings to the user\n- Require explicit user override to proceed\n\n## Built-in Allowlist\n\nThe aggregate scanner includes an allowlist for known false positives:\n- **Security scanners** (skill-defender, clawdbot-security-check) — their docs\u002Fscripts contain the very patterns they detect\n- **Auth-dependent skills** (tailscale, reddit, n8n, event-planner) — legitimately reference credential paths and API keys\n- **Config-aware skills** (memory-setup, eightctl, summarize) — reference config paths in documentation\n- **Agent-writing skills** (self-improving-agent) — designed to modify agent files\n\n## Pattern Reference\n\nSee `references\u002Fthreat-patterns.md` for full documentation of all detected patterns, organized by category with explanations of why each is dangerous.\n\n## Important Notes\n\n- **No external dependencies** — standard library only (Python 3.9+)\n- **Fast** — under 1 second per skill, ~30 seconds for a full batch of 30+ skills\n- This is **deterministic pattern matching** (Layer 2 defense). Not LLM-based.\n- False positives are possible — the allowlist and `--exclude` flag help\n- The scanner **will flag itself** if scanned without the allowlist — this is expected\n","# Skill Defender — Malicious Pattern Scanner\n\n## When to Run\n\n### Automatic Triggers\n1. **New skill installed** — Immediately run `scan_skill.py` against it before allowing use\n2. **Skill updated** — Re-scan after any file changes in a skill directory\n3. **Periodic audit** — Run batch scan on all installed skills when requested\n\n### Manual Triggers\n- User says \"scan skill X\" → scan that specific skill\n- User says \"scan all skills\" → batch scan all skills\n- User says \"security check\" or \"audit skills\" → same as above\n\n## Scripts\n\n### `scripts\u002Fscan_skill.py` — Single Skill Scanner\nScans one skill directory for malicious patterns. Produces JSON or human-readable output.\n\n### `scripts\u002Faggregate_scan.py` — Batch Scanner\nScans ALL installed skills and produces a single JSON report. Includes a built-in allowlist to reduce false positives from security-related skills, API skills, and other known-safe patterns.\n\n## How to Run\n\n```bash\n# Scan a single skill (human-readable)\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir\n\n# Scan a single skill (JSON output)\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir --json\n\n# Scan ALL installed skills (JSON aggregate report)\npython3 scripts\u002Faggregate_scan.py\n\n# With custom skills directory\npython3 scripts\u002Faggregate_scan.py --skills-dir \u002Fpath\u002Fto\u002Fskills\n\n# With verbose warnings\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir --verbose\n\n# Exclude false positives\npython3 scripts\u002Fscan_skill.py \u002Fpath\u002Fto\u002Fskill-dir --exclude \"pattern1\" \"pattern2\"\n```\n\n### Exit Codes (scan_skill.py)\n- `0` = clean or informational only\n- `1` = suspicious (medium\u002Fhigh findings)\n- `2` = dangerous (critical findings)\n- `3` = error\n\n### Output Format (aggregate_scan.py)\n\n```json\n{\n  \"skills\": [\n    {\n      \"name\": \"skill-name\",\n      \"verdict\": \"clean|suspicious|dangerous|error\",\n      \"findingsCount\": 0,\n      \"findings\": []\n    }\n  ],\n  \"summary\": \"All 37 skills passed with no significant issues.\",\n  \"totalSkills\": 37,\n  \"cleanCount\": 37,\n  \"suspiciousCount\": 0,\n  \"dangerousCount\": 0,\n  \"errorCount\": 0,\n  \"timestamp\": \"2026-02-02T06:00:00+00:00\"\n}\n```\n\n## Auto-Detection\n\nBoth scripts auto-detect paths:\n- **Skills directory**: Detected from script location (walks up to find `skills\u002F` parent), falls back to `~\u002Fclawd\u002Fskills`, `~\u002Fskills`, `~\u002F.openclaw\u002Fskills`\n- **Scanner script**: `aggregate_scan.py` finds `scan_skill.py` co-located in the same directory\n\n## Handling Results\n\n### ✅ Clean (`verdict: \"clean\"`)\n- No action needed — skill is safe\n\n### ⚠️ Suspicious (`verdict: \"suspicious\"`)\n- Warn the user with a summary of findings\n- Show the category and severity of each finding\n\n### ? Dangerous (`verdict: \"dangerous\"`)\n- Block the skill — do not proceed with installation or use\n- Show the full detailed findings to the user\n- Require explicit user override to proceed\n\n## Built-in Allowlist\n\nThe aggregate scanner includes an allowlist for known false positives:\n- **Security scanners** (skill-defender, clawdbot-security-check) — their docs\u002Fscripts contain the very patterns they detect\n- **Auth-dependent skills** (tailscale, reddit, n8n, event-planner) — legitimately reference credential paths and API keys\n- **Config-aware skills** (memory-setup, eightctl, summarize) — reference config paths in documentation\n- **Agent-writing skills** (self-improving-agent) — designed to modify agent files\n\n## Pattern Reference\n\nSee `references\u002Fthreat-patterns.md` for full documentation of all detected patterns, organized by category with explanations of why each is dangerous.\n\n## Important Notes\n\n- **No external dependencies** — standard library only (Python 3.9+)\n- **Fast** — under 1 second per skill, ~30 seconds for a full batch of 30+ skills\n- This is **deterministic pattern matching** (Layer 2 defense). Not LLM-based.\n- False positives are possible — the allowlist and `--exclude` flag help\n- The scanner **will flag itself** if scanned without the allowlist — this is expected\n",{"name":5,"description":7},"main","e7e336ac628c3e3bd771aff1aaa469c93778f94a","skills\u002Fsnail3d\u002Fclawd\u002Fskills\u002Fskill-defender",0,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del","2026-08-23 22:39:37",{"source":8,"skillName":5,"commands":56,"prompt":66,"zipAvailable":67},[57,60,63],{"tool":58,"command":59},"npx","npx skills add kbarbel640-del\u002Fskills --skill skill-defender",{"tool":61,"command":62},"bunx","bunx skills add kbarbel640-del\u002Fskills --skill skill-defender",{"tool":64,"command":65},"pnpm","pnpm dlx skills add kbarbel640-del\u002Fskills --skill skill-defender","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fsnail3d\u002Fclawd\u002Fskills\u002Fskill-defender\u002FSKILL.md",true,[69,75,81],{"path":70,"resourceType":71,"resourceTypeDesc":72,"sizeBytes":73,"sourceHtmlUrl":74},"references\u002Fthreat-patterns.md","REFERENCE","参考文档",13456,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fsnail3d\u002Fclawd\u002Fskills\u002Fskill-defender\u002Freferences\u002Fthreat-patterns.md",{"path":76,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":79,"sourceHtmlUrl":80},"scripts\u002Faggregate_scan.py","SCRIPT","脚本",12582,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fsnail3d\u002Fclawd\u002Fskills\u002Fskill-defender\u002Fscripts\u002Faggregate_scan.py",{"path":82,"resourceType":77,"resourceTypeDesc":78,"sizeBytes":83,"sourceHtmlUrl":84},"scripts\u002Fscan_skill.py",33262,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fsnail3d\u002Fclawd\u002Fskills\u002Fskill-defender\u002Fscripts\u002Fscan_skill.py",[86,116,140,161,167,187],{"skillNo":87,"name":88,"nameZh":6,"description":89,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":97,"publishedAt":43},"01M6G8J55967D6281ACMKAKTEQ","crowd-prompting","A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzzadrian\u002Fcrowd-prompting\u002FSKILL.md",[92],{"categoryNo":93,"categoryName":94,"taxonomyType":95,"taxonomyTypeDesc":96},"01JBSEEDCAT000000000000036","内容创作者","PROFESSION","适用职业",[98,99,36,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115],"crowd prompting","prompting","with","tokens","domain","world","prompts","operations","instructions","text","tool","system","improve","productivity","marketplace","https","content","ai agents",{"skillNo":117,"name":118,"nameZh":6,"description":119,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":120,"categories":121,"keywords":123,"publishedAt":43},"01M6G8J0PKPAYVET6BWE8W4C26","dilemm-ai","Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzyori\u002Fdilemm-ai\u002FSKILL.md",[122],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},[124,36,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,104,33],"dilemm ai","arena","analyze","browser","openclaw agent","create","automation","browser automation","bot","openclaw","design","strategy","headless","compete","submit","matchmaking",{"skillNo":141,"name":142,"nameZh":6,"description":143,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":144,"categories":145,"keywords":149,"publishedAt":43},"01M6G8HWAF3K9SW7NP3Z83CPJ6","arxiv-paper-reviews","Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date\u002Fcategory\u002Finterest, viewing paper details with comments, or submitting paper reviews via API at http:\u002F\u002F150.158.152.82:8000.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Fweak-accept\u002FSKILL.md",[146],{"categoryNo":147,"categoryName":148,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000021","资料检索与研究",[150,151,152,153,154,155,156,100,157,138,33,158,36,159,160],"arxiv paper reviews","reviews","arxiv","paper","crawler","papers","comments","fetch","read","http","via",{"skillNo":162,"name":142,"nameZh":6,"description":143,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":163,"categories":164,"keywords":166,"publishedAt":43},"01M6G8HQJ7N7WMY6YV7D7SSJ16","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Farxiv-paper-reviews\u002FSKILL.md",[165],{"categoryNo":147,"categoryName":148,"taxonomyType":20,"taxonomyTypeDesc":21},[153,152,151,150,160,155,156,100,154,138,33,157,158,36,159],{"skillNo":168,"name":169,"nameZh":6,"description":170,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":171,"categories":172,"keywords":173,"publishedAt":43},"01M6G8HM95Y64JNVFC2HN4E2BG","git-summary","Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzweack\u002Fgit-summary\u002FSKILL.md",[],[174,175,176,177,178,179,180,181,182,183,184,185,186],"git","summary","git summary","commits","repository","win32","status","linux","contributors","true","quick","get","branches",{"skillNo":188,"name":189,"nameZh":6,"description":190,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":191,"categories":192,"keywords":197,"publishedAt":43},"01M6G8HGEGF05CNEJCGVYFSC4R","agent-constitution","Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fztsalexey\u002Fagent-constitution\u002FSKILL.md",[193,194],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},{"categoryNo":195,"categoryName":196,"taxonomyType":95,"taxonomyTypeDesc":96},"01JBSEEDCAT000000000000037","律师与法务",[198,199,200,201,100,202,203,48,204,158,205,206,207,208,209,113,210,211,212],"agent constitution","constitution","contracts","tree","query","base","log","check","Rules","projects","compliance","actions","state","governance","github"]