security-audit

ClawSkills 作者 clawskills

Minimal helper to audit skill.md-style instructions for supply-chain risks.

安装 / 下载方式

TotalClaw CLI推荐

totalclaw install clawskills:clawskills~cerbug45-agents-skill-security-audit

cURL直接下载，无需登录

curl -fsSL https://skills.taituai.com/api/skills/clawskills%3Aclawskills~cerbug45-agents-skill-security-audit/file -o cerbug45-agents-skill-security-audit.md

# security-audit

Minimal helper to audit skill.md-style instructions for supply-chain risks.

## Features
- Heuristic scan for exfiltration patterns (HTTP POST, curl to unknown domains, reading ~/.env, credential keywords).
- Permission manifest reminder: lists filesystem/network touches it sees.
- Safe report: markdown summary + risk level.

## Usage
```bash
python audit.py path/to/skill.md > report.md
```