Skill Scanner

Name: skill-scanner Version: 1.0.0 Author: vrtlly.us Category: Security

Description

Scans ClawHub skills for malicious patterns before and after installation. Detects base64 payloads, reverse shells, data exfiltration, crypto miners, obfuscated URLs, and more.

Usage

Scan all installed skills

python3 scanner.py

Scan a specific skill

python3 scanner.py --skill <skill-name>

Scan a specific file

python3 scanner.py --file <path-to-file>

Pre-install scan (download → scan → report → cleanup)

python3 scanner.py --pre-install <clawhub-slug>

JSON output

python3 scanner.py --json
python3 scanner.py --skill <name> --json

Safe install hook

bash install-hook.sh <clawhub-slug>
bash install-hook.sh <clawhub-slug> --force

Detection Patterns

| Category | What it catches | |---|---| | Base64 payloads | Long base64 strings near exec/bash/eval | | Pipe to shell | curl ... \| bash, wget ... \| sh | | Raw IP connections | http://1.2.3.4 style URLs | | Dangerous functions | eval(), exec(), os.system(), subprocess(shell=True) | | Hidden files | Dotfile creation in unexpected places | | Env exfiltration | Reading .env, API keys sent outbound | | Obfuscated URLs | rentry.co, pastebin, hastebin redirectors | | Fake dependencies | References to non-existent packages | | Data exfil endpoints | webhook.site, requestbin, etc. | | Crypto mining | xmrig, stratum, mining pool references | | Password archives | Password-protected zip/tar downloads |

Risk Scores

• 0-29 (Green): Clean — no suspicious patterns found
• 30-69 (Yellow): Suspicious — review warnings before use
• 70-100 (Red): Dangerous — likely malicious, do not install

Files

• scanner.py — Main scanner engine
• install-hook.sh — Safe installation wrapper
• whitelist.json — Known-good and known-bad skill lists
• report-template.md — Markdown report template