Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: "install skill", "clawhub install", "new skill", "add skill", "skill from". Always run this BEFORE installation.
Initial release of clawhub-skill-scanner - Introduces a mandatory security audit tool for skill installations from ClawHub, GitHub, and external sources. - Deep code analysis detects critical risks including reverse shells, credential access, data exfiltration, command injection, and common malware patterns. - Outputs clear risk scoring (SAFE/CAUTION/DANGER/BLOCKED) and actionable summaries. - Designed to minimize false alarms by ignoring common benign patterns. - Includes CLI examples and integration guide for automated pre-install scanning. - Created in response to ClawHavoc supply chain compromise.