# Send guard-scanner to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "guard-scanner", "name": "guard-scanner", "source": "tencent", "type": "skill", "category": "安全合规", "sourceUrl": "https://clawhub.ai/koatora20/guard-scanner", "canonicalUrl": "https://clawhub.ai/koatora20/guard-scanner", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/guard-scanner", "sourceDownloadUrl": "https://clawhub.ai/api/v1/download?slug=guard-scanner", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "CHANGELOG.md", "CODE_OF_CONDUCT.md", "CONTRIBUTING.md", "GOVERNANCE.md", "MAINTAINERS.md", "README.md" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "slug": "guard-scanner", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-29T18:49:52.224Z", "expiresAt": "2026-05-06T18:49:52.224Z", "httpStatus": 429, "finalUrl": "https://clawhub.ai/api/v1/download?slug=guard-scanner", "contentType": "text/plain", "probeMethod": "head", "details": { "probeUrl": "https://clawhub.ai/api/v1/download?slug=guard-scanner", "contentDisposition": null, "redirectLocation": null, "bodySnippet": null, "slug": "guard-scanner" }, "scope": "item", "summary": "Item download looks usable.", "detail": "Yavira can redirect you to the upstream package for this item.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/guard-scanner" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/guard-scanner", "downloadUrl": "https://openagent3.xyz/downloads/guard-scanner", "agentUrl": "https://openagent3.xyz/skills/guard-scanner/agent", "manifestUrl": "https://openagent3.xyz/skills/guard-scanner/agent.json", "briefUrl": "https://openagent3.xyz/skills/guard-scanner/agent.md" } } ``` ## Documentation ### guard-scanner Scan AI agent skills for 35 categories of threats. v16 adds a 5-layer analysis pipeline, OWASP ASI projection mode, richer finding metadata, and Rust runtime evidence integration on top of the existing prompt injection, identity hijacking, memory poisoning, MCP poisoning, and supply chain coverage. ### Quick Start # Scan a skill directory npx -y @guava-parity/guard-scanner ./my-skills/ --verbose # Scan with identity protection npx -y @guava-parity/guard-scanner ./skills/ --soul-lock --strict # Filter to OWASP ASI mapped findings only npx -y @guava-parity/guard-scanner ./skills/ --compliance owasp-asi --format json # Installed CLI guard-scanner ./skills/ --strict # npm exec compatibility npm exec --yes --package=@guava-parity/guard-scanner -- guard-scanner ./skills/ --strict ### Scan guard-scanner # Scan directory guard-scanner -v # Verbose output guard-scanner --json # JSON report file guard-scanner --sarif # SARIF for CI/CD guard-scanner --html # HTML report guard-scanner --compliance owasp-asi --format json ### Asset Audit Audit public registries for credential exposure. guard-scanner audit npm guard-scanner audit github guard-scanner audit clawhub guard-scanner audit all --verbose ### MCP Server Start as MCP server for IDE integration. guard-scanner serve Editor config (Cursor, Windsurf, Claude Code, OpenClaw): { "mcpServers": { "guard-scanner": { "command": "npx", "args": ["-y", "@guava-parity/guard-scanner", "serve"] } } } MCP tools: scan_skill, scan_text, check_tool_call, audit_assets, get_stats, and the async experimental task helpers. ### Quality Contract Public quality contract: Benchmark corpus version: 2026-03-13.quality-v1 Precision target: >= 0.90 Recall target: >= 0.90 FPR/FNR budgets: <= 0.10 Explainability completeness: 1.0 Runtime policy latency budget: 5ms Evidence surfaces: docs/spec/capabilities.json docs/data/corpus-metrics.json docs/data/benchmark-ledger.json docs/data/fp-ledger.json ### Watch Mode Monitor skill directories in real-time during development. guard-scanner watch ./skills/ --strict --soul-lock ### VirusTotal Integration Combine semantic detection with VirusTotal's 70+ antivirus engines. Optional — guard-scanner works fully without it. export VT_API_KEY=your-key guard-scanner scan ./skills/ --vt-scan ### Runtime Guard The validated OpenClaw surface is the compiled runtime plugin entry (dist/openclaw-plugin.mjs) discovered through package.json > openclaw.extensions and mounted on before_tool_call for OpenClaw v2026.3.13, with regression coverage kept on v2026.3.8. The before_tool_call hook provides 27 runtime checks across 5 defense layers, while v16 scan output adds a second 5-layer analysis view: LayerFocus1. Threat DetectionReverse shell, curl|bash, SSRF2. Trust DefenseSOUL.md tampering, memory injection3. Safety JudgePrompt injection in tool arguments4. BehavioralNo-research execution detection5. Trust ExploitationAuthority claims, creator bypass Modes: monitor (log only), enforce (block CRITICAL, default), strict (block HIGH+). ### v16 Output Surface Finding fields: layer, layer_name, owasp_asi, protocol_surface Compliance mode: --compliance owasp-asi MCP summaries: scan_skill, scan_text, and get_stats now surface layer and ASI context Runtime evidence: Rust memory_integrity and soul_hard_gate modules are represented in the TypeScript pipeline ### Key Flags FlagEffect--verbose / -vDetailed findings with line numbers--strictLower detection thresholds--soul-lockEnable identity protection patterns--json / --sarif / --htmlOutput format--fail-on-findingsExit 1 on findings (CI/CD)--check-depsScan package.json dependencies--rules Load custom rules JSON--plugin Load plugin module--compliance owasp-asiKeep only OWASP ASI mapped findings in output ### Custom Rules module.exports = { name: 'my-plugin', patterns: [ { id: 'MY_01', cat: 'custom', regex: /dangerous_pattern/g, severity: 'HIGH', desc: 'Description', all: true } ] }; guard-scanner ./skills/ --plugin ./my-plugin.js ### CI/CD Integration # .github/workflows/security.yml - name: Scan AI skills run: npx -y @guava-parity/guard-scanner ./skills/ --format sarif --fail-on-findings > report.sarif - uses: github/codeql-action/upload-sarif@v3 with: sarif_file: report.sarif ### Threat Categories 35 categories covering OWASP LLM Top 10 + Agentic Security Top 10. See src/patterns.ts for the full pattern database. Key categories: Prompt Injection — hidden instructions, invisible Unicode, homoglyphs Identity Hijacking ⚿ — persona swap, SOUL.md overwrites, memory wipe Memory Poisoning ⚿ — crafted conversation injection MCP Security — tool poisoning, SSRF, shadow servers A2A Contagion — agent-to-agent worm propagation Supply Chain V2 — typosquatting, slopsquatting, lifecycle scripts CVE Patterns — CVE-2026-2256, 25046, 25253, 25905, 27825 ⚿ = Requires --soul-lock flag ## Trust - Source: tencent - Verification: Indexed source record - Publisher: koatora20 - Version: 16.0.1 ## Source health - Status: healthy - Item download looks usable. - Yavira can redirect you to the upstream package for this item. - Health scope: item - Reason: direct_download_ok - Checked at: 2026-04-29T18:49:52.224Z - Expires at: 2026-05-06T18:49:52.224Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/guard-scanner) - [Send to Agent page](https://openagent3.xyz/skills/guard-scanner/agent) - [JSON manifest](https://openagent3.xyz/skills/guard-scanner/agent.json) - [Markdown brief](https://openagent3.xyz/skills/guard-scanner/agent.md) - [Download page](https://openagent3.xyz/downloads/guard-scanner)