Tencent SkillHub · Security & Compliance

SkillGuard Scanner

Security scanner for OpenClaw/ClawHub skills. Detects malware, reverse shells, credential theft, prompt injection, memory poisoning, typosquatting, and suspicious prerequisites before installation. Use when installing new skills, auditing existing skills, checking a skill name for typosquatting, or scanning ClawHub skills for security risks.

skill openclawclawhub Free

0 Downloads

0 Stars

0 Installs

0 Score

High Signal

⬇ 0 downloads ★ 0 stars Unverified but indexed

Install for OpenClaw

Known item issue.

This item's current download entry is known to bounce back to a listing or homepage instead of returning a package file.

Quick setup

Open the source page and confirm the package flow manually.
Review SKILL.md if you can obtain the files.
Treat this source as manual setup until the download is verified.

Requirements

Target platform: OpenClaw
Install method: Manual import
Extraction: Extract archive
Prerequisites: OpenClaw
Primary doc: SKILL.md

Package facts

Download mode: Manual review
Package format: ZIP package
Source platform: Tencent SkillHub
What's included: CHANGELOG.md, SKILL.md, references/threat-landscape.md, scripts/scanner.py

Validation

Open the source listing and confirm there is a real package or setup artifact available.
Review SKILL.md before asking your agent to continue.
Treat this source as manual setup until the upstream download flow is fixed.

Install with your agent

Agent handoff

Use the source page and any available docs to guide the install because the item currently does not return a direct package file.

Open the source page via Open source listing.
If you can obtain the package, extract it into a folder your agent can access.
Paste one of the prompts below and point your agent at the source page and extracted files.

New install

I tried to install a skill package from Yavira, but the item currently does not return a direct package file. Inspect the source page and any extracted docs, then tell me what you can confirm and any manual steps still required.

Upgrade existing

I tried to upgrade a skill package from Yavira, but the item currently does not return a direct package file. Compare the source page and any extracted docs with my current installation, then summarize what changed and what manual follow-up I still need.

Open Send to Agent page Open JSON manifest Open Markdown brief

Trust & source

Release facts

Source: Tencent SkillHub
Verification: Indexed source record
Version: 1.1.0

Provenance

Publisher: msgnoki
Source page: View original listing
Canonical URL: Open canonical page

Documentation

ClawHub primary doc Primary doc: SKILL.md 14 sections Open source page

SkillGuard — Skill Security Scanner

Scan OpenClaw skills for security threats before they compromise your system.

Scan all installed skills

python3 {scripts}/scanner.py

Scan a single skill

python3 {scripts}/scanner.py --skill <skill-name>

Check a skill name for typosquatting

python3 {scripts}/scanner.py --check-name <name>

Scan from ClawHub before installing

python3 {scripts}/scanner.py --fetch-clawhub <skill-name>

Critical Threats

Reverse shells — nc -e, bash -i >& /dev/tcp, ncat, mkfifo Code obfuscation — base64 -d | bash, eval(), exec() with encoded payloads

High Threats

Suspicious URLs — webhook.site, glot.io, ngrok.io, pastebin.com Memory poisoning — Instructions to write to SOUL.md, MEMORY.md, AGENTS.md Malicious prerequisites — Download instructions in docs (the ClawHavoc attack vector)

Medium Threats

Credential access — Patterns accessing .env, API keys, tokens, SSH keys Data exfiltration — Outbound HTTP POST/PUT with sensitive data Hardcoded IPs — Public IPs embedded in code Typosquatting — Skill names similar to popular/known skills (Levenshtein ≤ 2) Crypto wallet access — Seed phrases, private keys, wallet patterns

Low Threats

Shell execution — subprocess, os.system, child_process (common but worth noting)

Risk Levels

🔴 CRITICAL (≥50) — Do NOT install. Likely malicious. 🟠 HIGH (25-49) — Review manually before installing. Multiple suspicious patterns. 🟡 MEDIUM (10-24) — Some flags, likely false positives but worth checking. 🟢 LOW (1-9) — Minor flags, generally safe. ✅ CLEAN (0) — No issues detected.

False Positive Likelihood

Each finding includes a FP estimate (low/medium/high): low — Likely a real threat medium — Could be legitimate, review context high — Probably benign (e.g., security tool referencing attack patterns, search tool using fetch)

Workflow: Before Installing a Skill

Run python3 {scripts}/scanner.py --fetch-clawhub <skill-name> (requires clawhub CLI) Review the report — anything CRITICAL or HIGH with low FP = reject If CLEAN or LOW only → safe to install If MEDIUM → skim the flagged files manually

Output

Console summary with emoji risk levels JSON report saved to {baseDir}/../data/scan_results.json (configurable via --json-out)

Context: Why This Matters

As of February 2026, 341 malicious skills were found on ClawHub (Koi Security / ClawHavoc campaign), distributing Atomic Stealer malware via fake prerequisites. OpenClaw has 512 known vulnerabilities (Kaspersky audit). There is no official skill vetting process. SkillGuard fills this gap. See references/threat-landscape.md for detailed background.

Category context

Identity, auth, scanning, governance, audit, and operational guardrails.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package

3 Docs1 Scripts

SKILL.md Primary doc
CHANGELOG.md Docs
references/threat-landscape.md Docs
scripts/scanner.py Scripts