51 lines
1.4 KiB
Markdown
51 lines
1.4 KiB
Markdown
|
---
|
|||
|
|
name: skill-scanner
|
|||
|
|
description: "在安装前扫描Clawdbot和MCP技能中的恶意软件、间谍软件、加密货币挖矿程序和恶意代码模式。安全审计工具，可检测数据泄露、系统修改尝试、后门和混淆技术。"
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
# Skill Scanner
|
|||
|
|
|
|||
|
|
Security audit tool for Clawdbot/MCP skills - scans for malware, spyware, crypto-mining, and malicious patterns.
|
|||
|
|
|
|||
|
|
## Capabilities
|
|||
|
|
- Scan skill folders for security threats
|
|||
|
|
- Detect data exfiltration patterns
|
|||
|
|
- Identify system modification attempts
|
|||
|
|
- Catch crypto-mining indicators
|
|||
|
|
- Flag arbitrary code execution risks
|
|||
|
|
- Find backdoors and obfuscation techniques
|
|||
|
|
- Output reports in Markdown or JSON format
|
|||
|
|
- Provide Web UI via Streamlit
|
|||
|
|
|
|||
|
|
## Usage
|
|||
|
|
|
|||
|
|
### Command Line
|
|||
|
|
```bash
|
|||
|
|
python skill_scanner.py /path/to/skill-folder
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### Within Clawdbot
|
|||
|
|
```
|
|||
|
|
"Scan the [skill-name] skill for security issues using skill-scanner"
|
|||
|
|
"Use skill-scanner to check the youtube-watcher skill"
|
|||
|
|
"Run a security audit on the remotion skill"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
### Web UI
|
|||
|
|
```bash
|
|||
|
|
pip install streamlit
|
|||
|
|
streamlit run streamlit_ui.py
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## Requirements
|
|||
|
|
- Python 3.7+
|
|||
|
|
- No additional dependencies (uses Python standard library)
|
|||
|
|
- Streamlit (optional, for Web UI)
|
|||
|
|
|
|||
|
|
## Entry Point
|
|||
|
|
- **CLI:** `skill_scanner.py`
|
|||
|
|
- **Web UI:** `streamlit_ui.py`
|
|||
|
|
|
|||
|
|
## Tags
|
|||
|
|
#security #malware #spyware #crypto-mining #scanner #audit #code-analysis #mcp #clawdbot #agent-skills #safety #threat-detection #vulnerability
|