Skill Scanner

Gen Digital Skill Scanner is a security analysis tool designed to evaluate the safety of skills (plugins/extensions) used with the OpenClaw AI agent platform. It is part of the Agent Trust Hub, operated by Gen Threat Labs.

The tool allows users to submit a ClawHub skill URL and receive a real-time safety assessment via a REST API. The API returns a severity rating indicating whether a skill is safe or potentially dangerous.

Core functionality:

• Accepts a ClawHub skill URL as input via a POST request to the scan API endpoint
• Returns a severity field in the JSON response (e.g., SAFE, LOW, or higher risk levels)
• Analyzes skills in real-time using AI-powered threat detection
• Checks for malicious patterns, data exfiltration attempts, suspicious network calls, and known security vulnerabilities
• Applies a zero-trust model where every skill is treated as untrusted by default until verified

The tool also includes a companion port scanner feature that checks whether a locally deployed OpenClaw instance is inadvertently exposed to the internet.

Security coverage includes:

• Detection of credential theft and data exfiltration behaviors
• Identification of suspicious API calls and network activity
• Coverage of OWASP LLM Top 10 standards for agentic and LLM security
• Analysis powered by Gen's global threat intelligence

The service is accessible via a web interface (with an OpenClaw agent prompt) and a cURL-based API. It is targeted at developers and users of the OpenClaw AI agent ecosystem who want to verify the safety of third-party skills before installation.