Skillscanner

by rexshangv1.0.1

โš ๏ธ Review

Security scanner for ClawHub skills from Gen Digital. Looks up skill safety via the scan API.

clawhub install skillscanner
๐Ÿ“ฅ
10
All-time Downloads
๐Ÿ“ฆ
10
Active Installs
โญ
10
Stars

Security Analysis

๐Ÿค– Powered by DeepSeek AI

65/100
Safety Score

โ€œThis security scanning skill has legitimate purpose but lacks critical transparency and licensing. The absence of visible code, unknown author, and missing license require manual review before deployment. Community adoption suggests some trust, but essential security documentation is insufficient.โ€

โœ…Data Privacy RiskSkill appears to query external API about other skills, no direct user data handling indicated
โœ…Permission ScopeNo excessive permissions described; likely requires network access for API calls
โš ๏ธSupply Chain RiskAuthor 'rexshang' unknown; no verified identity or organizational affiliation
โš ๏ธCode TransparencyNo actual code provided for review; behavior inferred from description only
โœ…Malware IndicatorsNo overt malicious patterns described; purpose aligns with security scanning
โœ…Social Engineering RiskUnlikely to manipulate users; presents as security tool
โš ๏ธDependency SafetyUnknown dependencies; relies on external 'scan API' with unspecified security
โš ๏ธUpdate FrequencyOnly metadata changes in changelog; unclear if actively maintained
โœ…Community ValidationModerate adoption (2,679 downloads, 10 stars) suggests some community trust
โŒLicense ComplianceNull license is problematic; no usage terms specified

Last scanned: 3/29/2026

Community Mentions

From Reddit & GitHub discussions

๐Ÿ˜Ÿ
๐Ÿ˜Ÿ Mixed/Negative
5 mention(s) found ยท 0 Reddit, 5 GitHub
โšซ GitHub๐Ÿ˜Ÿ Negative

Add core dataclasses and return typed PipelineResult from run_pipeline

### Motivation - Introduce shared, typed dataclasses to represent pipeline rows/results, professions and export payloads to remove unstructured tuples and string-status plumbing. - Make `run_pipeline` return a typed `PipelineResult` so callers can consume structured fields instead of `(rows, stat

โšซ GitHub๐Ÿ˜Ÿ Negative

Refactor professions handling into loader/compute modules and add tests

### Motivation - Split profession code into I/O and pure-computation to make profession logic testable and to isolate JSON parsing from numeric math. - Allow the exporter to depend on profession logic via an injectable service so callers can swap in test doubles or alternate loaders. - Surface data

โšซ GitHub๐Ÿ˜ Neutral

Add observable view model and tests

### Motivation - Decouple UI state from the Tk implementation so core logic (rows/status/warnings) can be exercised without an active GUI. - Provide an observable abstraction so the Tk app can subscribe/bind to state updates instead of directly mutating lists. - Surface import/profession computation

โšซ GitHub๐Ÿ˜ Neutral

Add ACP Support

--- ## ACP: AI-assisted skill editing via Agent Client Protocol ### Summary Adds an in-app AI composition panel that lets users prompt a connected coding agent (Claude Code, Cursor, Augment) to edit the currently open skill file. The agent's proposed file changes are intercepted as reviewab

โšซ GitHub๐Ÿ˜Ÿ Negative

fix: address issues #29, #38, #40, #41 with tests

## Summary Implements four issue fixes in a single batch with comprehensive test coverage: ### Issue #41 โ€” MetaAnalyzer.analyze() silently returns empty list - `MetaAnalyzer.analyze()` now emits a **WARNING** log explaining that `analyze_with_findings()` should be used instead - `SkillScanner.__in

User Reviews

Loading reviews...

Sign in to write a review

Sign In

Changelog v1.0.1

- Added _meta.json file for metadata management. - No changes to existing skill logic or documentation.

Safety Score

โ“˜
65
out of 100
โš ๏ธ Review

๐Ÿค– AI-powered scan

Info

Version
1.0.1
Versions
2
Author
rexshang
Updated
Feb 25, 2026
Install on ClawHub โ†’โš–๏ธ Compare Skillsโ† Browse All Skills