โ† All skills
Tencent SkillHub ยท Developer Tools

Skill Scanner

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.

โฌ‡ 0 downloads โ˜… 0 stars Unverified but indexed

Install for OpenClaw

Item requires authentication.

This item appears to require sign-in or permission before the package can be fetched. Open the source page and confirm access manually.

Quick setup
  1. Open the source page and confirm the required access before downloading.
  2. Review SKILL.md after the source grants access.
  3. Treat the package as manual setup until the direct download works.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Manual review
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
README.md, SKILL.md, skill_scanner.py, streamlit_ui.py

Validation

  • Sign in or confirm the required access before retrying the download.
  • Review SKILL.md after authentication succeeds.
  • Treat this source as manual setup until the package can be fetched directly.

Install with your agent

Agent handoff

Use the source page and any available docs to guide the install because the item requires authentication or permission before the package can be fetched.

  1. Open the source page via Open source page.
  2. If you can obtain the package, extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the source page and extracted files.
New install

I tried to install a skill package from Yavira, but the item requires authentication or permission before the package can be fetched. Inspect the source page and any extracted docs, then tell me what you can confirm and any manual steps still required. Then review README.md for any prerequisites, environment setup, or post-install checks.

Upgrade existing

I tried to upgrade a skill package from Yavira, but the item requires authentication or permission before the package can be fetched. Compare the source page and any extracted docs with my current installation, then summarize what changed and what manual follow-up I still need. Then review README.md for any prerequisites, environment setup, or post-install checks.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
0.1.2

Documentation

ClawHub primary doc Primary doc: SKILL.md 8 sections Open source page

Skill Scanner

Security audit tool for Clawdbot/MCP skills - scans for malware, spyware, crypto-mining, and malicious patterns.

Capabilities

Scan skill folders for security threats Detect data exfiltration patterns Identify system modification attempts Catch crypto-mining indicators Flag arbitrary code execution risks Find backdoors and obfuscation techniques Output reports in Markdown or JSON format Provide Web UI via Streamlit

Command Line

python skill_scanner.py /path/to/skill-folder

Within Clawdbot

"Scan the [skill-name] skill for security issues using skill-scanner" "Use skill-scanner to check the youtube-watcher skill" "Run a security audit on the remotion skill"

Web UI

pip install streamlit streamlit run streamlit_ui.py

Requirements

Python 3.7+ No additional dependencies (uses Python standard library) Streamlit (optional, for Web UI)

Entry Point

CLI: skill_scanner.py Web UI: streamlit_ui.py

Tags

#security #malware #spyware #crypto-mining #scanner #audit #code-analysis #mcp #clawdbot #agent-skills #safety #threat-detection #vulnerability

Category context

Code helpers, APIs, CLIs, browser automation, testing, and developer operations.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
2 Docs2 Scripts
  • SKILL.md Primary doc
  • README.md Docs
  • skill_scanner.py Scripts
  • streamlit_ui.py Scripts