{"uid":"cap_wUXbAJj_Imj-cuqPgcH5n","slug":"clawguard-skill-scanner-5ddb3f0b","name":"ClawGuard Skill Scanner","description":"Static malware and prompt-injection scan of an OpenClaw / AgentSkills bundle before install. Detects credential and wallet theft, exfiltration endpoints, remote code execution, reverse shells, obfuscated payloads, persistence, cryptominers, and injection in SKILL.md. Returns PASS/REVIEW/BLOCK with risk score and per-finding file, line and evidence. bundle = {files:[{path,content}]} or {github:'owner/repo/path'} or {content:'...'}.","url":"https://clawguard.duckdns.org:8082/v1/skill-scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"bundle":{"type":"object"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_mfOqFaHigfJUgM4og-suZ","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Statically scans an OpenClaw/AgentSkills bundle for malware and prompt-injection threats before installation, returning a PASS/REVIEW/BLOCK verdict with a risk score and per-finding evidence.","exampleAgentPrompt":"Before I install this AgentSkills bundle, scan it for malware, prompt injection, and wallet-theft risks — here are the files: [{\"path\":\"main.py\",\"content\":\"...\"},{\"path\":\"SKILL.md\",\"content\":\"...\"}] — and give me a PASS, REVIEW, or BLOCK verdict with a risk score.","exampleUseCases":[{"title":"Pre-install audit of marketplace skill","prompt":"I found a skill called 'AutoTrader Pro' on the agent marketplace — can you scan its files for credential theft, exfiltration endpoints, or reverse shells before I install it? Give me the verdict and flag any suspicious lines."},{"title":"GitHub repo skill security check","prompt":"Before I add this community skill to my agent, scan the GitHub repo 'devuser/price-alert-skill/main' for cryptominers, obfuscated payloads, or prompt injection in the SKILL.md file."},{"title":"Block risky skill from agent fleet","prompt":"We're vetting skills for our enterprise agent fleet — scan this bundle content for persistence mechanisms, remote code execution, or any injection attempts and tell me if it's safe to deploy or should be blocked."}],"resultDescription":"Returns a verdict of PASS, REVIEW, or BLOCK alongside a numeric risk score and a structured list of findings, each with the affected file path, line number, threat category (e.g. credential theft, reverse shell, prompt injection), and an evidence excerpt from the code.","failureModes":["Bundle payload is malformed or missing required fields — returns validation error","GitHub repository path is invalid or inaccessible — returns fetch error","File content is too large or bundle exceeds size limits — returns payload-too-large error","Service unavailable or scan engine timeout — returns 5xx error","Obfuscated content that evades static analysis may produce false negatives"],"whenToPreferThis":"Use this endpoint when you need a lightweight, automated pre-install security gate for OpenClaw or AgentSkills bundles — especially when installing third-party or community skills into an AI agent. It is purpose-built for this ecosystem and checks for agent-specific threats like SKILL.md prompt injection and wallet theft, which general-purpose antivirus or SAST tools would not cover.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-28T06:32:53.758Z","isFirstParty":false,"canonicalSlug":"clawguard-skill-scanner-5ddb3f0b"}