Join a video meeting as an AI bot with voice, avatar, and screenshare across four operating modes.
by johnpatternai22 installs8 stars
Security
AI Agent Skill Scanner
Try itSecurity scanner for AI agent skills. Detects hardcoded secrets, unsafe code execution, prompt injection, and malware patterns in under 50ms. Scan before you...
What it does
**Scan any skill for security issues before you install it.** Detects hardcoded secrets, unsafe code execution, prompt injection, and malware patterns in under 50ms.
The skill document
AI Agent Skill Scanner 🔒
Scan any skill for security issues before you install it. Detects hardcoded secrets, unsafe code execution, prompt injection, and malware patterns in under 50ms.
How to Use
# Scan any installed skill folder
python3 scripts/vetter.py /path/to/skill
# JSON output for scripting
python3 scripts/vetter.py /path/to/skill --json
What It Detects
| Issue | Severity | Example |
|---|---|---|
eval() / exec() | Critical | Runs arbitrary code |
| Pipe to shell | Critical | `curl ... |
| Destructive commands | Critical | rm -rf /, mkfs. |
os.system() | Critical | Shell commands |
| Hardcoded API keys | High | api_key, apikey |
shell=True | High | Shell injection risk |
| Hardcoded secrets | High | auth_token, secret |
| Credential file access | High | .ssh/, .aws/ |
| Sudo elevation | High | sudo commands |
| Base64 obfuscation | High | Hidden code execution |
| Git config access | High | .git/config reads |
| Password hardcoding | High | password literal |
| Permission overrides | Medium | chmod 777 |
| Network calls | Medium | requests.post() |
New in v2.1
- 10 new detection signatures (pipe-to-shell, sudo escalation, destructive commands, credential file access, base64 obfuscation, git config, permission overrides)
- Skips
node_modules/,__pycache__/,.git/(reduced false positives) - Smarter pipe-to-shell detection (only flags actual pipe patterns)
- Self-scan exclusions (scanner ignores its own signatures file)
--verboseflag for skipped file counts
Example Result
Scanned 430 files in 368ms (skipped 6)
Found 1 issue(s):
[CRITICAL] pipe-to-shell at install.sh:26
→ Remote code execution risk: downloading and piping to shell
Install
clawhub install ai-agent-skill-scanner
Notes
- Text matching — won't catch obfuscated code
- Always scan skills from unknown publishers before installing
- Quick scan prevents accidents (50ms per skill)
Feedback
clawhub star ai-agent-skill-scanner — clawhub sync
Related skills
Stores durable facts in a categorized, plain-markdown vault on disk, alongside your agent's built-in memory.
by Iván559 installs18 stars
Generate and edit Draw.io, Mermaid, and Excalidraw diagrams from natural language using a structured JSON spec.
by nssa.io1.0k installs47 stars
Find why your productivity system keeps failing, then apply the smallest fix — capacity math, bottleneck routing, durable local notes.
by Iván855 installs69 stars
Fetch raw ad creative, app, ranking, and revenue data from AdMapix as structured JSON.
by fly0pants4.3k installs296 stars
Write, debug, and tune Playwright specs with locator strategy, trace diagnosis, and CI-aware timeouts.
by ivangdavila1.3k installs130 stars
More from certainlogicai
Browse all skillsQuery the CertainLogic Timechain from any Y Combinator QM deployment. 75K+ cryptographically verified agent execution traces for training, audit, and research. Free open-source skill (API sold separately).
by certainlogicai1 installs
Unlimited organized memory for your AI agent. Store, search, and organize projects, contacts, decisions, and knowledge across categories. Never lose context...
by certainlogicai
Installs 5 essential tools that make your AI agent smarter over time — reflection, proactivity, learning, memory, and skill extraction. Your agent improves w...
by certainlogicai
Curated catalog of quality AI agent skills. Find the right tool for every task — verified recommendations for memory, productivity, security, and automation....
by certainlogicai
Curated toolkit for business productivity. Installation guides for 5 essential tools — Google Workspace CLI, task manager, notes, health checks, and security...
by certainlogicai
Get your AI agent productive in 5 minutes. Automated environment scan, smart skill recommendations, and exact install commands. No more trial and error.
by certainlogicai