Quick overview
Runs structured security checks on skills from registries or shared sources before installation. Covers RCE patterns, malicious code, credential misuse, and mismatches between a registry listing and the skill's SKILL.md. Produces a 10-point report with a Benign or Suspicious verdict.
Rather than ad-hoc judgment, it applies a fixed 10-point checklist covering RCE, malicious code, credential scope, and registry consistency, always ending in a single clear verdict.
Common tasks
- Checking a ClawHub skill for safety before installing it
- Reviewing a skill that requests OAuth or API key access
- Auditing all downloaded skills in a local skills directory
- Evaluating a skill shared via URL or file before granting credentials
- Self-checking an authored skill before publishing to a registry
Install paths
Primary command
openclaw install runeweaverstudios/skill-safety-checker
ClawHub installer
npx clawhub@latest install runeweaverstudios/skill-safety-checker
OpenClaw CLI
openclaw skills install runeweaverstudios/skill-safety-checker
Direct OpenClaw install
openclaw install runeweaverstudios/skill-safety-checker
Skill metadata
- Category: Coding Agents & IDEs
- Language: Markdown
- Version: 1.0.0
- Security status: Benign
Review upstream source
The full public SKILL.md body is not directly fetchable for this entry right now, so this page is using the best available catalog metadata. Review the upstream source page for the latest files, version history, and security scan details: https://clawhub.ai/runeweaverstudios/skill-safety-checker
