{
  "schemaVersion": "1.0",
  "item": {
    "slug": "skill-scanner",
    "name": "Skill Scanner",
    "source": "tencent",
    "type": "skill",
    "category": "开发工具",
    "sourceUrl": "https://clawhub.ai/bvinci1-design/skill-scanner",
    "canonicalUrl": "https://clawhub.ai/bvinci1-design/skill-scanner",
    "targetPlatform": "OpenClaw"
  },
  "install": {
    "downloadMode": "manual_only",
    "downloadUrl": "/downloads/skill-scanner",
    "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=skill-scanner",
    "sourcePlatform": "tencent",
    "targetPlatform": "OpenClaw",
    "installMethod": "Manual import",
    "extraction": "Extract archive",
    "prerequisites": [
      "OpenClaw"
    ],
    "packageFormat": "ZIP package",
    "includedAssets": [
      "README.md",
      "SKILL.md",
      "skill_scanner.py",
      "streamlit_ui.py"
    ],
    "primaryDoc": "SKILL.md",
    "quickSetup": [
      "Open the source page and confirm the required access before downloading.",
      "Review SKILL.md after the source grants access.",
      "Treat the package as manual setup until the direct download works."
    ],
    "agentAssist": {
      "summary": "Use the source page and any available docs to guide the install because the item requires authentication or permission before the package can be fetched.",
      "steps": [
        "Open the source page via Open source page.",
        "If you can obtain the package, extract it into a folder your agent can access.",
        "Paste one of the prompts below and point your agent at the source page and extracted files."
      ],
      "prompts": [
        {
          "label": "New install",
          "body": "I tried to install a skill package from Yavira, but the item requires authentication or permission before the package can be fetched. Inspect the source page and any extracted docs, then tell me what you can confirm and any manual steps still required. Then review README.md for any prerequisites, environment setup, or post-install checks."
        },
        {
          "label": "Upgrade existing",
          "body": "I tried to upgrade a skill package from Yavira, but the item requires authentication or permission before the package can be fetched. Compare the source page and any extracted docs with my current installation, then summarize what changed and what manual follow-up I still need. Then review README.md for any prerequisites, environment setup, or post-install checks."
        }
      ]
    },
    "sourceHealth": {
      "source": "tencent",
      "slug": "skill-scanner",
      "status": "auth_required",
      "reason": "login_required",
      "recommendedAction": "review_source",
      "checkedAt": "2026-05-09T01:32:39.009Z",
      "expiresAt": "2026-05-12T01:32:39.009Z",
      "httpStatus": 403,
      "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=skill-scanner",
      "contentType": "text/plain",
      "probeMethod": "head",
      "details": {
        "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=skill-scanner",
        "contentDisposition": null,
        "redirectLocation": null,
        "bodySnippet": null,
        "slug": "skill-scanner"
      },
      "scope": "item",
      "summary": "Item requires authentication.",
      "detail": "This item appears to require sign-in or permission before the package can be fetched. Open the source page and confirm access manually.",
      "primaryActionLabel": "Open source page",
      "primaryActionHref": "https://clawhub.ai/bvinci1-design/skill-scanner"
    },
    "validation": {
      "installChecklist": [
        "Sign in or confirm the required access before retrying the download.",
        "Review SKILL.md after authentication succeeds.",
        "Treat this source as manual setup until the package can be fetched directly."
      ],
      "postInstallChecks": [
        "Confirm the extracted package includes the expected docs or setup files.",
        "Validate the skill or prompts are available in your target agent workspace.",
        "Capture any manual follow-up steps the agent could not complete."
      ]
    },
    "downloadPageUrl": "https://openagent3.xyz/downloads/skill-scanner",
    "agentPageUrl": "https://openagent3.xyz/skills/skill-scanner/agent",
    "manifestUrl": "https://openagent3.xyz/skills/skill-scanner/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/skill-scanner/agent.md"
  },
  "agentAssist": {
    "summary": "Use the source page and any available docs to guide the install because the item requires authentication or permission before the package can be fetched.",
    "steps": [
      "Open the source page via Open source page.",
      "If you can obtain the package, extract it into a folder your agent can access.",
      "Paste one of the prompts below and point your agent at the source page and extracted files."
    ],
    "prompts": [
      {
        "label": "New install",
        "body": "I tried to install a skill package from Yavira, but the item requires authentication or permission before the package can be fetched. Inspect the source page and any extracted docs, then tell me what you can confirm and any manual steps still required. Then review README.md for any prerequisites, environment setup, or post-install checks."
      },
      {
        "label": "Upgrade existing",
        "body": "I tried to upgrade a skill package from Yavira, but the item requires authentication or permission before the package can be fetched. Compare the source page and any extracted docs with my current installation, then summarize what changed and what manual follow-up I still need. Then review README.md for any prerequisites, environment setup, or post-install checks."
      }
    ]
  },
  "documentation": {
    "source": "clawhub",
    "primaryDoc": "SKILL.md",
    "sections": [
      {
        "title": "Skill Scanner",
        "body": "Security audit tool for Clawdbot/MCP skills - scans for malware, spyware, crypto-mining, and malicious patterns."
      },
      {
        "title": "Capabilities",
        "body": "Scan skill folders for security threats\nDetect data exfiltration patterns\nIdentify system modification attempts\nCatch crypto-mining indicators\nFlag arbitrary code execution risks\nFind backdoors and obfuscation techniques\nOutput reports in Markdown or JSON format\nProvide Web UI via Streamlit"
      },
      {
        "title": "Command Line",
        "body": "python skill_scanner.py /path/to/skill-folder"
      },
      {
        "title": "Within Clawdbot",
        "body": "\"Scan the [skill-name] skill for security issues using skill-scanner\"\n\"Use skill-scanner to check the youtube-watcher skill\"\n\"Run a security audit on the remotion skill\""
      },
      {
        "title": "Web UI",
        "body": "pip install streamlit\nstreamlit run streamlit_ui.py"
      },
      {
        "title": "Requirements",
        "body": "Python 3.7+\nNo additional dependencies (uses Python standard library)\nStreamlit (optional, for Web UI)"
      },
      {
        "title": "Entry Point",
        "body": "CLI: skill_scanner.py\nWeb UI: streamlit_ui.py"
      },
      {
        "title": "Tags",
        "body": "#security #malware #spyware #crypto-mining #scanner #audit #code-analysis #mcp #clawdbot #agent-skills #safety #threat-detection #vulnerability"
      }
    ],
    "body": "Skill Scanner\n\nSecurity audit tool for Clawdbot/MCP skills - scans for malware, spyware, crypto-mining, and malicious patterns.\n\nCapabilities\nScan skill folders for security threats\nDetect data exfiltration patterns\nIdentify system modification attempts\nCatch crypto-mining indicators\nFlag arbitrary code execution risks\nFind backdoors and obfuscation techniques\nOutput reports in Markdown or JSON format\nProvide Web UI via Streamlit\nUsage\nCommand Line\npython skill_scanner.py /path/to/skill-folder\n\nWithin Clawdbot\n\"Scan the [skill-name] skill for security issues using skill-scanner\"\n\"Use skill-scanner to check the youtube-watcher skill\"\n\"Run a security audit on the remotion skill\"\n\nWeb UI\npip install streamlit\nstreamlit run streamlit_ui.py\n\nRequirements\nPython 3.7+\nNo additional dependencies (uses Python standard library)\nStreamlit (optional, for Web UI)\nEntry Point\nCLI: skill_scanner.py\nWeb UI: streamlit_ui.py\nTags\n\n#security #malware #spyware #crypto-mining #scanner #audit #code-analysis #mcp #clawdbot #agent-skills #safety #threat-detection #vulnerability"
  },
  "trust": {
    "sourceLabel": "tencent",
    "provenanceUrl": "https://clawhub.ai/bvinci1-design/skill-scanner",
    "publisherUrl": "https://clawhub.ai/bvinci1-design/skill-scanner",
    "owner": "bvinci1-design",
    "version": "0.1.2",
    "license": null,
    "verificationStatus": "Indexed source record"
  },
  "links": {
    "detailUrl": "https://openagent3.xyz/skills/skill-scanner",
    "downloadUrl": "https://openagent3.xyz/downloads/skill-scanner",
    "agentUrl": "https://openagent3.xyz/skills/skill-scanner/agent",
    "manifestUrl": "https://openagent3.xyz/skills/skill-scanner/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/skill-scanner/agent.md"
  }
}