BB — stable

DCL Skill Auditor — Pre-Install Security Scanner (dcl-skill-auditor)

below the trust line (BBB): unproven adoption, young, or flagged instructions.

Scan any ClawHub skill before installing it. 534 out of 3,984 ClawHub skills contained critical vulnerabilities — credential theft, prompt injection, data exfiltration. Snyk Research, 2026. DCL Skill Auditor analyzes SKILL.md, scripts, and manifests against 30+ known attack patterns...

Signals

Downloads	1,021 (7d: series too short)
Installs · stars · versions	21 · 0 · 4
Track record	142 days in the registry
Author	daririnch
Requires	none declared
Instructions read	yes: payees, wallets and shell patterns extracted from SKILL.md

Flags

PIPE_SHELL: instructs the agent to pipe a download straight into a shell
OBFUSCATED: contains encoded blobs or eval-style execution

Who it pays (x402 counterparties found in its instructions)

service	service rating	wallet
No payee found in its instructions (mentions payments, but no rated counterparty).

Install

openclaw skills install @daririnch/dcl-skill-auditor · registry page

For agents

Free JSON: https://agenteconomy.report/k/dcl-skill-auditor.json · badge: https://agenteconomy.report/k/dcl-skill-auditor.svg · paid record via x402: GET https://agenteconomy.report/api/skill/dcl-skill-auditor (US$ 0.005). Check any skill before installing it with the x402-trust-check skill.

How this is computed

Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-08-29.