Skill Guard 1.0.2

Scan ClawHub skills for security vulnerabilities BEFORE installing. Use when installing new skills from ClawHub to detect prompt injections, malware payloads...

“This skill presents significant security risks despite claiming to be a security scanner. Platform moderation has flagged it for suspicious LLM behavior and prompt injection instructions, suggesting it may be a trojan horse. The combination of excessive permissions, unknown author, and platform warnings makes this too dangerous to install.”

Last scanned: 3/29/2026

Community Mentions

From Reddit & GitHub discussions

Changelog v1.0.0

Initial release: client-side security scanning for ClawHub skills before installation. - Scans skill packages for prompt injections, malware, hardcoded secrets, exfiltration URLs, and other AI-specific threats before installing. - Uses Invariant Labs/Snyk's mcp-scan for deep AI skill analysis. - Installs only if skill is clean; otherwise quarantines detected threats in a staging folder. - Provides clear CLI usage: secure install script, exit codes, and threat handling instructions. - Adds a str...

Related Skills