Initial commit with translated description
This commit is contained in:
50
SKILL.md
Normal file
50
SKILL.md
Normal file
@@ -0,0 +1,50 @@
|
||||
---
|
||||
name: skill-scanner
|
||||
description: "在安装前扫描Clawdbot和MCP技能中的恶意软件、间谍软件、加密货币挖矿程序和恶意代码模式。安全审计工具,可检测数据泄露、系统修改尝试、后门和混淆技术。"
|
||||
---
|
||||
|
||||
# Skill Scanner
|
||||
|
||||
Security audit tool for Clawdbot/MCP skills - scans for malware, spyware, crypto-mining, and malicious patterns.
|
||||
|
||||
## Capabilities
|
||||
- Scan skill folders for security threats
|
||||
- Detect data exfiltration patterns
|
||||
- Identify system modification attempts
|
||||
- Catch crypto-mining indicators
|
||||
- Flag arbitrary code execution risks
|
||||
- Find backdoors and obfuscation techniques
|
||||
- Output reports in Markdown or JSON format
|
||||
- Provide Web UI via Streamlit
|
||||
|
||||
## Usage
|
||||
|
||||
### Command Line
|
||||
```bash
|
||||
python skill_scanner.py /path/to/skill-folder
|
||||
```
|
||||
|
||||
### Within Clawdbot
|
||||
```
|
||||
"Scan the [skill-name] skill for security issues using skill-scanner"
|
||||
"Use skill-scanner to check the youtube-watcher skill"
|
||||
"Run a security audit on the remotion skill"
|
||||
```
|
||||
|
||||
### Web UI
|
||||
```bash
|
||||
pip install streamlit
|
||||
streamlit run streamlit_ui.py
|
||||
```
|
||||
|
||||
## Requirements
|
||||
- Python 3.7+
|
||||
- No additional dependencies (uses Python standard library)
|
||||
- Streamlit (optional, for Web UI)
|
||||
|
||||
## Entry Point
|
||||
- **CLI:** `skill_scanner.py`
|
||||
- **Web UI:** `streamlit_ui.py`
|
||||
|
||||
## Tags
|
||||
#security #malware #spyware #crypto-mining #scanner #audit #code-analysis #mcp #clawdbot #agent-skills #safety #threat-detection #vulnerability
|
||||
Reference in New Issue
Block a user