安全

LYGO Skill Gate

LYGO Skill Gate — local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan any skill folder before you install or trust it: subprocess/shell, network/HTTP, secrets in source, eval/exec, webhook/exfil hints, permission-claim mismatches. Use when auditing ClawHub skills, reviewing SKILL.md safety, safe install checks, malware triage, or SkillSpector-style local gates. Pure stdlib. No network, no subprocess, no auto-install. Install clawhub:@deepseekoracle/lygo-skill-gate.

它能做什么

技能文档

LYGO Skill Gate v1.0.0

Scan before you install.

After ClawHavoc-style incidents, every human and every agent needs a local gate that reads a skill package and scores risk — without calling home, without running the skill.

Signature: Delta9Phi963-SKILL-GATE-v1.0.0
ClawHub: @deepseekoracle/lygo-skill-gate

Problem this solves

Who	Need
Humans	“Is this ClawHub skill safe to install?”
Agents	“Before I load a skill tree, does code match its no-network / no-subprocess claims?”
Operators	Reproducible risk band + findings list for audit logs

Searches: skill security, audit skill, safe install, clawhub malware, skillspector local, scan SKILL.md.

Install

npx clawhub@latest install deepseekoracle/lygo-skill-gate

Commands

cd path/to/lygo-skill-gate
python scripts/self_check.py

# Scan a skill by path
python scripts/skill_gate.py scan "I:/E Drive/.grok/skills/lygo-context-guard"

# Or by slug (searches common skill roots)
python scripts/skill_gate.py scan lygo-ops-detector

# Self-demo (scan this package)
python scripts/skill_gate.py self-demo

# Write report under state/ (consent)
python scripts/skill_gate.py scan ./some-skill --write last_scan.json --i-consent

Exit	Meaning
0	clear / low
5	elevated or claim mismatch
10	high / critical — do not install casually
2	bad path / not a skill

What it checks

subprocess / os.system / Popen / shell=True
HTTP clients, sockets, webhooks
eval / exec, pickle, unsafe yaml
Hardcoded key-like strings
Destructive deletes, git push / auto-publish hints
Claim mismatch: frontmatter says network: false but code uses urlopen

Does not: download skills, install skills, execute scanned code, or phone home.

Pair with

Skill	Role
`lygo-context-guard`	Token budget + secret redact for prompts
`lygo-ops-detector`	Discourse signal heuristics
`lygo-kickstart-wizard`	Onboarding map

License

MIT-0.
Δ9Φ963 — verify before trust · local gate · human remains the publisher.

LYGO SkillSpector

LYGO SkillSpector — enhanced local pre-install skill risk scanner for OpenClaw/ClawHub packages. Scan, gate (CI max-band), batch, and Markdown report: subprocess/shell, network/HTTP/httpx, secrets, eval/exec, curl|bash, miners, claim mismatches. Use when auditing ClawHub skills, SkillSpector-style gates, safe install checks, malware triage. Pure stdlib. No network, no subprocess, no auto-install. Builder HTML/multi-root pack on SkillHub FULL if running a full stack. Install clawhub:@deepseekoracle/lygo-skill-spector.

LYGO CLI Bridge

LYGO CLI Bridge — unified entrypoint: lygo health | map | analyze | mint | radar | next. Wraps kickstart + ops-detector + mint-walkthrough + deception-radar without exposing internal skill layout. In-process imports only; no subprocess; no auto-publish. Install clawhub:@deepseekoracle/lygo-cli-bridge.

1 次安装

clawsec-clawhub-checker

ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.

34 次安装

Trusted ClawHub Install Gate

Audit a local OpenClaw or ClawHub skill directory before installation, classify it as PASS, REVIEW, or BLOCK, check active-project impact, and optionally run...

14 次安装

LYGO Lattice Pulse

OpenClaw plugin skill — live Haven pulse, stack verify, registry compare, star chart gate, alignment readiness. Install clawhub:@deepseekoracle/lygo-lattice-pulse.