OpenClaw Skill Safety Scanner: 7.6% of 31,371 Skills Flagged as Dangerous
A developer has created an automated scanning tool that analyzes the entire ClawHub skill registry for security risks. The tool performs static analysis on every SKILL.md file and bundled scripts, checking for malware patterns, prompt injection, data exfiltration, permission abuse, and obfuscated code.
Key Findings
The scan of 31,371 skills revealed:
- 2,371 skills flagged as dangerous (approximately 7.6%)
- Average trust score across the registry: 93.2 out of 100
- Dangerous patterns found include wallet drainers, credential theft, environment variable exfiltration, curl piped to bash, and prompt injection
How It Works
The scanner uses pattern matching against known attack signatures from ClawHavoc and Cisco reports. It rescans the entire registry every 6 hours. The developer notes there are false positives, particularly with legitimate wallet skills that interact with wallets, but the tool catches obvious threats that might be missed during manual review.
How to Use It
Check a specific skill via API:
curl -s checksafe.dev/api/v1/skills/SKILL-NAME-HERE/badge.jsonFor automatic checking before every install, use the OpenClaw skill:
clawhub install agora-sentinelAccess the full database at checksafe.dev/dashboard/ and view the most dangerous skills sorted by severity at checksafe.dev/dashboard/dangerous.
Important Notes
The tool is static analysis only and won't catch everything. False positives exist, particularly with legitimate wallet tools. The developer is not affiliated with OpenClaw or ClawHub - this is a side project, not a company. The API is public with no authentication required, and badges are embeddable.
📖 Read the full source: r/openclaw
👀 See Also
OpenClaw 2026.9.2 Prompt Injection Attempt: How It Happened and What to Learn
An attacker sent a prompt-injection payload to an OpenClaw WhatsApp channel, but the agent's own self-detection probe exposed it. No damage was done—minus a few read-only greps. What can we learn about structural trust boundaries?
Caelguard: Open-source security scanner for OpenClaw skills
Caelguard is an MIT-licensed, locally-run scanner that detects security issues in OpenClaw skills, including prompt injection, credential harvesting, and obfuscated payloads. Research shows approximately 20% of published skills contain concerning patterns.
AI Vulnerability Discovery Outpacing Patch Deployment Times
A security expert argues that AI tools like Mythos will find vulnerabilities faster than fixes can be deployed, citing Log4j data showing average remediation times of 17 days and a decade-long elimination timeline.
Proxy-layer isolation for local agent API key security
A developer shares an approach to API key isolation in local agent setups using a Rust proxy that swaps placeholder tokens for real credentials, preventing exposure in agent memory, logs, context windows, and tool environments.