ClawSkillShield 🛡️

Local-first security scanner for OpenClaw/ClawHub skills.

What It Does

• Static analysis for security risks and malware patterns
• Detects:

- Hardcoded secrets (API keys, credentials, private keys) - Risky imports (os, subprocess, socket, ctypes) - Dangerous calls (eval(), exec(), open()) - Obfuscation (base64 blobs, suspicious encoding) - Hardcoded IPs

• Risk scoring (0–10) + detailed threat reports
• Quarantine high-risk skills automatically

Dual-Use Design

• CLI for humans: Quick safety checks before installing skills
• Agent API: Importable functions for autonomous agents/Moltbots to proactively scan and quarantine risky skills (essential post-ClawHavoc)

Quick Start

CLI (Humans)

pip install -e .
clawskillshield scan-local /path/to/skill
clawskillshield quarantine /path/to/skill

Python API (Agents)

from clawskillshield import scan_local, quarantine

threats = scan_local("/path/to/skill")
if risk_score < 4:  # HIGH RISK
    quarantine("/path/to/skill")

Zero Dependencies

Pure Python. No network calls. Runs entirely locally.

Why This Matters

ClawHavoc demonstrated how easily malicious skills can slip into the ecosystem. ClawSkillShield provides a trusted, open-source defense layer—audit the code, run offline, stay safe.

---

GitHub: https://github.com/AbYousef739/clawskillshield License: MIT Author: Ab Yousef Contact: [email protected]