BB — stable

Skill Security Scanner (skill-sec-scan)

below the trust line (BBB): unproven adoption, young, or flagged instructions.

自动检测并评分 ClawHub、GitHub 和本地 Skill 中 JS、TS、Python、Shell 文件的安全风险，识别数据泄露、注入、混淆和木马等威胁。

Signals

Downloads	1,152 (7d: series too short)
Installs · stars · versions	33 · 0 · 5
Track record	164 days in the registry
Author	torchesfrms
Requires	none declared
Instructions read	yes: payees, wallets and shell patterns extracted from SKILL.md

Flags

KEYS: handles private keys, seed phrases or secret keys: audit before installing

Who it pays (x402 counterparties found in its instructions)

service	service rating	wallet
No payee found in its instructions.

Install

openclaw skills install @torchesfrms/skill-sec-scan · registry page

For agents

Free JSON: https://agenteconomy.report/k/skill-sec-scan.json · badge: https://agenteconomy.report/k/skill-sec-scan.svg · paid record via x402: GET https://agenteconomy.report/api/skill/skill-sec-scan (US$ 0.005). Check any skill before installing it with the x402-trust-check skill.

How this is computed

Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-08-29.