Skillguard 技能审查

安全社区

作者仓库星标 602
作者仓库 awesome-openclaw-skills

解读按原文结构重写，命令、链接、术语均保留；右侧可核对作者原始 SKILL.md

原文结构

Commands：原文以此为独立章节。
Scan a local skill directory：原文以此为独立章节。
Scan with compact output (for chat)：原文以此为独立章节。

适用与边界

当前原文没有单列适用场景。
当前原文没有单列不适用场景或限制。

原文中的明确线索

要点：「When asked to check, audit, or scan a skill for security, use SkillGuard.」
文件与命令：--compact、--json、--quiet、home/claw/.openclaw/workspace/skillguard/src/cli.js

流狐整理：以上内容来自当前 SKILL.md 的章节与原词；未补写作者没有声明的工具、兼容性或能力。

SkillGuard — Agent Security Scanner

When asked to check, audit, or scan a skill for security, use SkillGuard.

Commands

Scan a local skill directory

node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan <path>

Scan with compact output (for chat)

node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan <path> --compact

Check text for prompt injection

node /home/claw/.openclaw/workspace/skillguard/src/cli.js check "<text>"

Batch scan multiple skills

node /home/claw/.openclaw/workspace/skillguard/src/cli.js batch <directory>

Scan a ClawHub skill by slug

node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan-hub <slug>

Score Interpretation

80-100 ✅ LOW risk — safe to install
50-79 ⚠️ MEDIUM — review findings before installing
20-49 🟠 HIGH — significant security concerns
0-19 🔴 CRITICAL — do NOT install without manual review

Output Formats

Default: full text report
--compact: chat-friendly summary
--json: machine-readable full report
--quiet: score and verdict only

流狐档案作者与许可取自来源；运行、权限和网络为流狐检测或估算

流狐分类: 安全
作者声明 Agent: 未找到明确声明；不据此推断已兼容或已测试
静态检查: 88 / 100 · 启发式扫描，不代表运行安全
作者 / 版本 / 许可: @sundial-org · 未声明 license
流狐 Token 估算: 低消耗
流狐接入估算: 即装即用
是否需要外部 API Key: 未发现要求
检测到的系统要求: macOS · Linux · Windows
底层运行要求: Node.js
检测到的文件与系统行为: 只读
检测到的网络行为: 仅限本地
安装命令数: 无（仅作为资料）

档案由构建时根据 SKILL.md 与安装命令自动衍生，可能与作者实际意图存在差异。

需要注意： 未限定 allowed-tools，默认拥有全部工具权限。

输出预览 skillguard.preview

# Scan with compact output (for chat)

node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan <path> --compact

SKILL.md SKILL.md

# SkillGuard — Agent Security Scanner

When asked to check, audit, or scan a skill for security, use SkillGuard.

## Commands

### Scan a local skill directory
```bash
node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan <path>
```

### Scan with compact output (for chat)
```bash
node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan <path> --compact
```

### Check text for prompt injection
```bash
node /home/claw/.openclaw/workspace/skillguard/src/cli.js check "<text>"
```

### Batch scan multiple skills
```bash
node /home/claw/.openclaw/workspace/skillguard/src/cli.js batch <directory>
```

### Scan a ClawHub skill by slug
```bash
node /home/claw/.openclaw/workspace/skillguard/src/cli.js scan-hub <slug>
```

## Score Interpretation
- 80-100 ✅ LOW risk — safe to install
- 50-79 ⚠️ MEDIUM — review findings before installing
- 20-49 🟠 HIGH — significant security concerns
- 0-19 🔴 CRITICAL — do NOT install without manual review

## Output Formats
- Default: full text report
- `--compact`: chat-friendly summary
- `--json`: machine-readable full report
- `--quiet`: score and verdict only

证据边界与执行链路

作者原文负责流程事实；流狐只索引当前章节、要点、文件与命令。

章节    -> Commands → Scan a local skill directory → Scan with compact output (for chat) → Check text for prompt injection → Batch scan multiple skills → Scan a ClawHub skill by slug
要点    -> When asked to check, audit, or scan a skill for security, use SkillGuard.
文件/命令 -> --compact · --json · --quiet · home/claw/.openclaw/workspace/skillguard/src/cli.js
内容 SHA-256 -> 945fc9c0614a