---

name: claw-secure-auditor description: Security audit tool for ClawHub/OpenClaw skills (static analysis + reputation scoring) version: 1.1.1 homepage: https://github.com/YOURNAME/claw-secure-auditor emoji: "🛡️" metadata: openclaw: '{"requires":{"env":["VIRUSTOTAL_API_KEY"],"bins":["python3"]},"primaryEnv":"VIRUSTOTAL_API_KEY","install":[{"kind":"uv","package":"requests","bins":["python"]}],"os":["linux","darwin"]}'

🛡️ Claw Secure Auditor v1.1.1

Security audit tool for ClawHub/OpenClaw skills with static analysis and reputation scoring.

---

🚀 Quick Start

1. Configure (optional)

export VIRUSTOTAL_API_KEY="your-api-key-here"

2. Use

# Quick audit (static + reputation)
python3 scripts/auditor.py quick ./my-skill

# Full audit (static + sandbox + VirusTotal)
python3 scripts/auditor.py full ./my-skill

# Pre-publish audit
python3 scripts/auditor.py before-publish ./my-skill

---

📋 Features

• ✅ Static analysis: 120+ dangerous keyword detection
• ✅ Self-whitelist: auto-mark self as safe
• ✅ Reputation score: 0-100 with Safe/Caution/Dangerous levels
• ✅ JSON report export
• ✅ Read-only operation, no file modification

---

📊 Risk Levels

Score	Level	Color
90-100	Safe	🟢
70-89	Caution	🟡
0-69	Dangerous	🔴

---

📌 Usage Examples

python3 scripts/auditor.py quick ./my-skill
python3 scripts/auditor.py full ./my-skill
python3 scripts/auditor.py before-publish ./my-new-skill

---

⚠️ Security Note

Read-only operation, no file modification, no external writes, API keys only for public data queries.

---

📝 Changelog

v1.1.1 (2026-03)

• Simplified metadata for ClawHub compatibility
• Removed complex dependencies
• Kept core audit functionality

v1.1.0 (2026-03)

• Self-whitelist: auto-mark self as safe
• Full English translation
• Improved scoring algorithm

v1.0.0 (2026-03)

• Initial release with 120+ pattern detection