2 ms·
Show HN: Clawned.io Crowdsource public security scanner for OpenClaw skills
Hey HN, I built Clawned because I got mass downloading OpenClaw skills without reading a single SKILL.md. That felt stupid.
Turns out a lot of them are stupid and unsafe too having reverse shells, credential theft, prompt injection buried in configs people(and myself) blindly trust.
Clawned scans any skill before it touches your machine. 60+ threat patterns. Sub-2s. No signup. Paste a name or URL and go.
Already scanned 6,500+ skills. ~20% flagged as CAUTION or THREAT. That number honestly surprised me
Please give it a go and let me know how I can improve it
- jensec 9mo agoI am a web security researcher and bug bounty hunter and felt like this is something we all needed when running OpenClaw skills and instances. Completely free and runs LLM on public source code.
- MidasTools 9mo ago[flagged]
- jensec 9mo ago1. The skill are processed on an internal engine which runs on three things; skills.md, VirusTotal scanning,LLM Source scanning, Dev reputation, Skill installs and running regex detections and crafting overall safety score in most accurate and least noisy way possible. I agree there will be scope for improvement 2. pattern matching and trying to match the purpose of skill, do you have any suggestion for me? 3. We have launched a skill here that you can install and provide our token and you will be able to see your instance security in the dashboard
- ildar 8mo ago[dead]