- name
- skill-scanner-pro
- description
- Scan Clawdbot and MCP skills for malware, spyware, crypto-miners, and malicious code patterns before you install them. Security audit tool that detects data exfiltration, system modification attempts, backdoors, and obfuscation techniques.
Skill-Scanner-Pro
Security audit tool for Clawdbot/MCP skills - scans for malware, spyware, crypto-mining, and malicious patterns. Pro enhanced edition.
Enhanced Edition (0.1.3)
- Fixed Web UI scan result rendering and export compatibility
- Reduced false positives in docs by limiting Markdown/RST scan scope to fenced code blocks
- Reduced scanner self-trigger noise (pattern definitions/comments)
- Skips noisy directories and oversized/binary files for cleaner output
Capabilities
- Scan skill folders for security threats
- Detect data exfiltration patterns
- Identify system modification attempts
- Catch crypto-mining indicators
- Flag arbitrary code execution risks
- Find backdoors and obfuscation techniques
- Output reports in Markdown or JSON format
- Provide Web UI via Streamlit
Usage
Command Line
python skill_scanner.py /path/to/skill-folderWithin Clawdbot
"Scan the [skill-name] skill for security issues using skill-scanner-pro"
"Use skill-scanner-pro to check the youtube-watcher skill"
"Run a security audit on the remotion skill"Web UI
pip install streamlit
streamlit run streamlit_ui.pyRequirements
- Python 3.7+
- No additional dependencies (uses Python standard library)
- Streamlit (optional, for Web UI)
Entry Point
- CLI:
skill_scanner.py - Web UI:
streamlit_ui.py
Tags
#security #malware #spyware #crypto-mining #scanner #audit #code-analysis #mcp #clawdbot #agent-skills #safety #threat-detection #vulnerability