Gen Digital Skill Scanner is a security analysis tool designed to evaluate the safety of skills (plugins/extensions) used with the OpenClaw AI agent platform. It is part of the Agent Trust Hub, operated by Gen Threat Labs. The tool allows users to submit a ClawHub skill URL and receive a real-time safety assessment via a REST API. The API returns a severity rating indicating whether a skill is safe or potentially dangerous. Core functionality: - Accepts a ClawHub skill URL as input via a POST request to the scan API endpoint - Returns a severity field in the JSON response (e.g., SAFE, LOW, or higher risk levels) - Analyzes skills in real-time using AI-powered threat detection - Checks for malicious patterns, data exfiltration attempts, suspicious network calls, and known security vulnerabilities - Applies a zero-trust model where every skill is treated as untrusted by default until verified The tool also includes a companion port scanner feature that checks whether a locally deployed OpenClaw instance is inadvertently exposed to the internet. Security coverage includes: - Detection of credential theft and data exfiltration behaviors - Identification of suspicious API calls and network activity - Coverage of OWASP LLM Top 10 standards for agentic and LLM security - Analysis powered by Gen's global threat intelligence The service is accessible via a web interface (with an OpenClaw agent prompt) and a cURL-based API. It is targeted at developers and users of the OpenClaw AI agent ecosystem who want to verify the safety of third-party skills before installation.