LYGO SkillSpector — enhanced local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan, gate (CI max-band), batch, and Markdown report: subprocess/shell, network/HTTP/httpx, secrets, eval/exec, curl|bash, miners, claim mismatches. Use when auditing ClawHub skills, SkillSpector-style gates, safe install checks, malware triage. Pure stdlib. No network, no subprocess, no auto-install. Builder HTML/multi-root pack on SkillHub FULL if running a full stack. Install clawhub:@deepseekoracle/lygo-skill-spector.
Security
LYGO Skill Gate
Try itLYGO Skill Gate — local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan any skill folder before you install or trust it: subprocess/shell, network/HTTP, secrets in source, eval/exec, webhook/exfil hints, permission-claim mismatches. Use when auditing ClawHub skills, reviewing SKILL.md safety, safe install checks, malware triage, or SkillSpector-style local gates. Pure stdlib. No network, no subprocess, no auto-install. Install clawhub:@deepseekoracle/lygo-skill-gate.
What it does
LYGO Skill Gate — local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan any skill folder before you install or trust it: subprocess/shell, network/HTTP, secrets in source, eval/exec, webhook/exfil hints, permission-claim mismatches. Use when auditing ClawHub skills, reviewing SKILL.md safety, safe install checks, malware triage, or SkillSpector-style local gates. Pure stdlib. No network, no subprocess, no auto-install. Install clawhub:@deepseekoracle/lygo-skill-gate.
The skill document
LYGO Skill Gate v1.0.0
Scan before you install.
After ClawHavoc-style incidents, every human and every agent needs a local gate that reads a skill package and scores risk — without calling home, without running the skill.
Signature: Delta9Phi963-SKILL-GATE-v1.0.0
ClawHub: @deepseekoracle/lygo-skill-gate
Problem this solves
| Who | Need |
|---|---|
| Humans | “Is this ClawHub skill safe to install?” |
| Agents | “Before I load a skill tree, does code match its no-network / no-subprocess claims?” |
| Operators | Reproducible risk band + findings list for audit logs |
Searches: skill security, audit skill, safe install, clawhub malware, skillspector local, scan SKILL.md.
Install
npx clawhub@latest install deepseekoracle/lygo-skill-gate
Commands
cd path/to/lygo-skill-gate
python scripts/self_check.py
# Scan a skill by path
python scripts/skill_gate.py scan "I:/E Drive/.grok/skills/lygo-context-guard"
# Or by slug (searches common skill roots)
python scripts/skill_gate.py scan lygo-ops-detector
# Self-demo (scan this package)
python scripts/skill_gate.py self-demo
# Write report under state/ (consent)
python scripts/skill_gate.py scan ./some-skill --write last_scan.json --i-consent
| Exit | Meaning |
|---|---|
| 0 | clear / low |
| 5 | elevated or claim mismatch |
| 10 | high / critical — do not install casually |
| 2 | bad path / not a skill |
What it checks
subprocess/os.system/Popen/shell=True- HTTP clients, sockets, webhooks
eval/exec, pickle, unsafe yaml- Hardcoded key-like strings
- Destructive deletes, git push / auto-publish hints
- Claim mismatch: frontmatter says
network: falsebut code usesurlopen
Does not: download skills, install skills, execute scanned code, or phone home.
Pair with
| Skill | Role |
|---|---|
lygo-context-guard | Token budget + secret redact for prompts |
lygo-ops-detector | Discourse signal heuristics |
lygo-kickstart-wizard | Onboarding map |
License
MIT-0.
Δ9Φ963 — verify before trust · local gate · human remains the publisher.
Related skills
LYGO CLI Bridge — unified entrypoint: lygo health | map | analyze | mint | radar | next. Wraps kickstart + ops-detector + mint-walkthrough + deception-radar without exposing internal skill layout. In-process imports only; no subprocess; no auto-publish. Install clawhub:@deepseekoracle/lygo-cli-bridge.
1 installs
ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.
34 installs
Audit a local OpenClaw or ClawHub skill directory before installation, classify it as PASS, REVIEW, or BLOCK, check active-project impact, and optionally run...
14 installs
OpenClaw plugin skill — live Haven pulse, stack verify, registry compare, star chart gate, alignment readiness. Install clawhub:@deepseekoracle/lygo-lattice-pulse.
1 installs
LYGO Agent Agora map (ClawHub tentacle). Scripts print local JSON for the agent square, Agent Portal, and FULL SkillHub path. This package does not fetch URLs, download zips, spawn shells, or write the live Star Chart. FULL lygo-cyborg-kernel-full.zip is a separate human download — verify SHA-256 before unzip. Use when onboarding agents to the agora, portal, or SkillHub FULL.