# Send Skill Defender to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "skill-defender", "name": "Skill Defender", "source": "tencent", "type": "skill", "category": "开发工具", "sourceUrl": "https://clawhub.ai/itsclawdbro/skill-defender", "canonicalUrl": "https://clawhub.ai/itsclawdbro/skill-defender", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/skill-defender", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=skill-defender", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md", "references/threat-patterns.md", "scripts/aggregate_scan.py", "scripts/scan_skill.py" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "slug": "skill-defender", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-05-08T22:19:36.040Z", "expiresAt": "2026-05-15T22:19:36.040Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=skill-defender", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=skill-defender", "contentDisposition": "attachment; filename=\"skill-defender-1.0.0.zip\"", "redirectLocation": null, "bodySnippet": null, "slug": "skill-defender" }, "scope": "item", "summary": "Item download looks usable.", "detail": "Yavira can redirect you to the upstream package for this item.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/skill-defender" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/skill-defender", "downloadUrl": "https://openagent3.xyz/downloads/skill-defender", "agentUrl": "https://openagent3.xyz/skills/skill-defender/agent", "manifestUrl": "https://openagent3.xyz/skills/skill-defender/agent.json", "briefUrl": "https://openagent3.xyz/skills/skill-defender/agent.md" } } ``` ## Documentation ### Automatic Triggers New skill installed — Immediately run scan_skill.py against it before allowing use Skill updated — Re-scan after any file changes in a skill directory Periodic audit — Run batch scan on all installed skills when requested ### Manual Triggers User says "scan skill X" → scan that specific skill User says "scan all skills" → batch scan all skills User says "security check" or "audit skills" → same as above ### scripts/scan_skill.py — Single Skill Scanner Scans one skill directory for malicious patterns. Produces JSON or human-readable output. ### scripts/aggregate_scan.py — Batch Scanner Scans ALL installed skills and produces a single JSON report. Includes a built-in allowlist to reduce false positives from security-related skills, API skills, and other known-safe patterns. ### How to Run # Scan a single skill (human-readable) python3 scripts/scan_skill.py /path/to/skill-dir # Scan a single skill (JSON output) python3 scripts/scan_skill.py /path/to/skill-dir --json # Scan ALL installed skills (JSON aggregate report) python3 scripts/aggregate_scan.py # With custom skills directory python3 scripts/aggregate_scan.py --skills-dir /path/to/skills # With verbose warnings python3 scripts/scan_skill.py /path/to/skill-dir --verbose # Exclude false positives python3 scripts/scan_skill.py /path/to/skill-dir --exclude "pattern1" "pattern2" ### Exit Codes (scan_skill.py) 0 = clean or informational only 1 = suspicious (medium/high findings) 2 = dangerous (critical findings) 3 = error ### Output Format (aggregate_scan.py) { "skills": [ { "name": "skill-name", "verdict": "clean|suspicious|dangerous|error", "findingsCount": 0, "findings": [] } ], "summary": "All 37 skills passed with no significant issues.", "totalSkills": 37, "cleanCount": 37, "suspiciousCount": 0, "dangerousCount": 0, "errorCount": 0, "timestamp": "2026-02-02T06:00:00+00:00" } ### Auto-Detection Both scripts auto-detect paths: Skills directory: Detected from script location (walks up to find skills/ parent), falls back to ~/clawd/skills, ~/skills, ~/.openclaw/skills Scanner script: aggregate_scan.py finds scan_skill.py co-located in the same directory ### ✅ Clean (verdict: "clean") No action needed — skill is safe ### ⚠️ Suspicious (verdict: "suspicious") Warn the user with a summary of findings Show the category and severity of each finding ### 🚨 Dangerous (verdict: "dangerous") Block the skill — do not proceed with installation or use Show the full detailed findings to the user Require explicit user override to proceed ### Built-in Allowlist The aggregate scanner includes an allowlist for known false positives: Security scanners (skill-defender, clawdbot-security-check) — their docs/scripts contain the very patterns they detect Auth-dependent skills (tailscale, reddit, n8n, event-planner) — legitimately reference credential paths and API keys Config-aware skills (memory-setup, eightctl, summarize) — reference config paths in documentation Agent-writing skills (self-improving-agent) — designed to modify agent files ### Pattern Reference See references/threat-patterns.md for full documentation of all detected patterns, organized by category with explanations of why each is dangerous. ### Important Notes No external dependencies — standard library only (Python 3.9+) Fast — under 1 second per skill, ~30 seconds for a full batch of 30+ skills This is deterministic pattern matching (Layer 2 defense). Not LLM-based. False positives are possible — the allowlist and --exclude flag help The scanner will flag itself if scanned without the allowlist — this is expected ## Trust - Source: tencent - Verification: Indexed source record - Publisher: itsclawdbro - Version: 1.0.0 ## Source health - Status: healthy - Item download looks usable. - Yavira can redirect you to the upstream package for this item. - Health scope: item - Reason: direct_download_ok - Checked at: 2026-05-08T22:19:36.040Z - Expires at: 2026-05-15T22:19:36.040Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/skill-defender) - [Send to Agent page](https://openagent3.xyz/skills/skill-defender/agent) - [JSON manifest](https://openagent3.xyz/skills/skill-defender/agent.json) - [Markdown brief](https://openagent3.xyz/skills/skill-defender/agent.md) - [Download page](https://openagent3.xyz/downloads/skill-defender)