Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Semantic security scanner for OpenClaw skills. Detects prompt injection, data exfiltration, and hidden instructions that traditional code scanners miss. Use when user asks to scan skills, check skill safety, or run a security audit.
Semantic security scanner for OpenClaw skills. Detects prompt injection, data exfiltration, and hidden instructions that traditional code scanners miss. Use when user asks to scan skills, check skill safety, or run a security audit.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Scans OpenClaw skills for natural language security threats โ the kind that VirusTotal and traditional code scanners cannot detect. Traditional scanners see SKILL.md as a text file. SenseGuard sees it as agent instructions and checks for prompt injection, data exfiltration, obfuscation, and persistence attacks.
When the user asks to scan a skill: python3 scripts/scanner.py --target <skill-name-or-path> Options: --target all โ scan all installed skills --deep โ force LLM semantic analysis (Layer 2) --no-cache โ skip cached results --json โ output raw JSON for further processing
When --json output contains a layer2_prompt field, process it as a security audit task, then feed the JSON result back to generate the final score. This is how the LLM analyzes intent beyond regex patterns.
The scanner outputs a Markdown risk report with: Score (0-100) and rating: SAFE / CAUTION / DANGEROUS / MALICIOUS Findings with rule IDs, evidence text, and line numbers Actionable recommendations For CRITICAL findings, clearly advise the user to take action.
SenseGuard catches what VirusTotal cannot: "ignore all previous instructions" โ prompt injection curl -X POST hidden in Markdown โ data exfiltration Zero-width characters hiding commands โ obfuscation "modify MEMORY.md" โ persistence attacks These are invisible to traditional malware scanners because they target the AI agent, not the operating system.
Identity, auth, scanning, governance, audit, and operational guardrails.
Largest current source with strong distribution and engagement signals.