90/100 (Very Low)

OpenClaw： benign
VirusTotal： benign
StaticScan： suspicious

OpenClaw： benign

The skill is internally coherent: it stages a ClawHub skill, runs a Snyk agent scanner, and installs only if the scan passes; required auth and tooling match the stated purpose.

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.prompt_injection_instructions

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773002419126,
        "_id": "k9709gyawrbq1phgwptwq8e3y982g8sd",
        "changelog": "**Skill-guard v1.0.3 changelog:**\n\n- Fork of @jamesOuttake\/skill-guard\n- Switched scanner engine from \"mcp-scan\" to \"Snyk Agent Scan\" (reflects upstream rename\/successor).\n- Updated documentation to reference Snyk Agent Scan and new scanner requirements.\n- Added a new exit code (3) for scanner availability\/configuration errors, making it clear when the scan cannot run (e.g., missing SNYK_TOKEN).\n- Improved error handling: the installer now explicitly separates scanner setup errors from skill security issues.\n- Minor documentation updates for clarity and accuracy.",
        "changelogSource": "user",
        "createdAt": 1773002419126,
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "firefrog-pepe",
        "handle": "firefrog-pepe",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/262842792?v=4",
        "kind": "user",
        "linkedUserId": "kn774q6trmgfx3rvfykt5q77th81hsrd"
    },
    "ownerHandle": "firefrog-pepe",
    "skill": {
        "_creationTime": 1773002419126,
        "_id": "kd7405syw3gpwfmjhjkyq777r182gnh8",
        "badges": [],
        "createdAt": 1773002419126,
        "displayName": "skill-guard w Snyk Agent Scan",
        "latestVersionId": "k9709gyawrbq1phgwptwq8e3y982g8sd",
        "ownerUserId": "kn774q6trmgfx3rvfykt5q77th81hsrd",
        "slug": "skill-guard-snyk-agent-scan",
        "stats": {
            "comments": 0,
            "downloads": 161,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "Scan ClawHub skills for security vulnerabilities BEFORE installing. Use when installing new skills from ClawHub to detect prompt injections, malware payloads...",
        "tags": {
            "latest": "k9709gyawrbq1phgwptwq8e3y982g8sd"
        },
        "updatedAt": 1774330719379
    }
}