Agent skill · security · sundial-org
security-skill-scanner
Security scanner for ClawdHub skills - detects suspicious patterns, manages whitelists, and monitors Moltbook for security threats.
Why this skill is useful
Adds executable scripts for security scanning and monitoring that enhance the AI's capabilities in threat detection and management.
What it needs
Requires python3 installed locally. About 2k tokens when loaded. Last updated 2026-03-07. 639 stars on the source repository.
What this skill does
Security Skill Scanner Scans ClawdHub skills for suspicious patterns, manages permission manifests, and monitors Moltbook for security threats. Features Pattern Detection: Scans SKILL.md files for credential theft, command injection, network exfil patterns Whitelist Management: Maintains list of known legitimate skills Moltbook Monitoring: Continuously monitors Moltbook for security discussions and scam alerts Permission Manifests: Generates and tracks skill permissions with Isnad chains Daily Reports: Automatic scanning with markdown/JSON reports Usage Scan All Skills Scan Specific Skill Add to Whitelist Check Whitelist Monitor Moltbook (One-shot) Files File Purpose ------ --------- skill-scanner.py Main scanner with regex pattern detection whitelist-manager.py Manage false-positive whitelist moltbook-monitor.sh Moltbook security feed monitor permission-manager.py Generate skill permission manifests data/whitelist.json Whitelisted skills database Patterns Detected Category Patterns ---------- ---------- Credential Theft .env access, webhook.site, POST secrets Command Injection os.system, eval, shell=True, subprocess Network Exfil HTTP requests with Bearer tokens Suspicious Downloads wget, curl -O, remote scripts Whitelisted Skills These skills are known legitimate and excluded from warnings: nano-banana-pro (Google Gemini) notion (Notion API) trello (Trello API) gog (Google Workspace) local-places (Google Places) bluebubbles (iMessage) weather (Weather API) And 5 more... Cron Jobs (Optional) Add to crontab for automated scanning: Pre-Install Hook (Block Suspicious Skills) Install new skills with automatic security scanning that BLOCKS suspicious installations: Quick Install with Scan Integration with molthub Add to your shell profile for automatic scanning on every install: Now every molthub install <skill> will be scanned first! What Happens 1. Clean skill → Installs normally ✅ 2. Whitelisted skill → Installs normally ✅ 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sundial-org/security-skill-scanner