Agent skill · security · sundial-org
security-audit-2
Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or installing.
Why this skill is useful
Adds executable scripts for comprehensive security auditing that are not commonly found in public documentation.
What it needs
Requires jq, python3, semgrep, trufflehog installed locally. About 1k tokens when loaded. Last updated 2026-03-07. 639 stars on the source repository.
What this skill does
security-audit A hostile-by-design, fail-closed audit workflow for codebases and OpenClaw/ClawHub skills. It does not try to answer “does this skill work?”. It tries to answer: “can this skill betray the system?” What it checks (high level) This skill’s scripts combine multiple layers: Secrets / credential leakage: trufflehog Static analysis: semgrep (auto rules) Hostile repo audit (custom): prompt-injection signals, persistence mechanisms, suspicious artifacts, dependency hygiene If any layer fails, the overall audit is FAIL. Run an audit (JSON) From this skill folder (use bash so it works even if executable bits were not preserved by a zip download): Example: Security levels (user configurable) Set the strictness level (default: standard): standard: pragmatic strict defaults (lockfiles required; install hooks/persistence/prompt-injection signals fail) strict: more patterns become hard FAIL (e.g. minified/obfuscation artifacts) paranoid: no "best-effort" hashing failures; more fail-closed behavior Manifest requirement (for zero-trust install workflows) For strict/quarantine workflows, require a machine-readable intent/permissions manifest at repo root: openclaw-skill.json If a repo/skill does not provide this manifest, the hostile audit should treat it as FAIL. See: docs/OPENCLAWSKILLMANIFESTSCHEMA.md. Optional: execution sandbox (Docker) Docker is optional here. This skill can be used for static auditing without Docker. If you want to execute any generated/untrusted code, run it in a separate sandbox workflow (recommended). Files scripts/runauditjson.sh — main JSON audit runner scripts/hostileaudit.py — prompt-injection/persistence/dependency hygiene scanner scripts/securityaudit.sh — convenience wrapper (always returns JSON, never non-zero) openclaw-skill.json — machine-readable intent/permissions manifest
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sundial-org/security-audit-2