Security audit and inspection skill for Clawdbot skills. Use this when you need to check skills for security vulnerabilities before installation, perform regular security audits on installed skills, verify skill description matches actual behavior, scan for prompt injection attempts, check for hardcoded secrets or credentials, verify no malicious intent in skill code or documentation, review file access patterns for potential configuration or secrets exposure, or audit dependencies for known vul
SkillScore95Maintained
Automatic
◆Security & AppSec pack
Last verified 8/16/2026
What it changes
Passed 21 of 22 test cases with the skill, and 14 of 22 without it.
Without skill64%
With skill95%
Checks it passed that the model alone missed
Includes SKILL.md in the review targets
Includes a Conclusion or Verdict section
Formats status breakdown by severity tiers
and 8 more in the full report
7 fixed14 passed either way1 still failing0 broke
Pass-rate lift
+32 pp
Tokens
+130%
Agent turns
0%
Response time
-29%
Model gemini-3.6-flashMeasured 8/16/2026v121 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 7
Prompt
Write a bash loop that runs the standard automated scanner script against every subfolder in `/opt/skills/`.
What was checked, without and with the skill
Checked
Without skill
With skill
Calls python3 scripts/scan_skill.py within the loop body
Missed
Passed
case-13 · gemini-3.6-flash · 8/16/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md422 lines4 filesincludes scripts
Security Check Skill
Comprehensive security auditing for Clawdbot skills to detect malicious intent, prompt injection, secrets exposure, and misaligned behavior.
Quick Start
Pre-Installation Security Check
Before installing a new skill from ClawdHub or any source:
Download and inspect the skill files
Run the automated security scanner:
python3 scripts/scan_skill.py /path/to/skill
Review the scanner output - Block any skill with HIGH severity issues
Manual review for MEDIUM severity issues
Verify behavior matches description before installation
Daily Security Audit
Run daily to ensure installed skills remain secure:
# Scan all skills in the skills directory
python3 scripts/scan_skill.py /path/to/skills/skill-1
python3 scripts/scan_skill.py /path/to/skills/skill-2
# ... repeat for each installed skill
Security Scanner
Running the Scanner
The scripts/scan_skill.py tool provides automated security analysis: