skillscan

Use it when: you install skills from hubs or repos and want each one checked for malicious code before use
It does: uploads each new skill to an online scanner run by its maker, TokAuth, and acts on the risk verdict
Blocks: high and critical risk skills, offering to delete them; low and medium ones need your OK; safe ones, and ones without a verdict, go ahead
Sends: with each scan, a client ID, your operating system and your machine's MAC address when it can read it
Runs: by itself whenever a skill is installed, loaded or questioned; on first load it offers to scan every installed skill
Updates: itself from TokAuth's server once a day, without asking
Unlike skill-vetter: which has the agent read the skill's code for red flags; here the analysis happens on a remote server

TLDR

SkillScan sets itself up as a gate: whenever a skill arrives, however it comes (a .zip, a git clone, npx skills add, a skill hub), the agent runs its Python scanner on it. A .zip is scanned before it's installed, anything else right after its files land. The scanner hashes the skill's folder and asks TokAuth's server whether that exact content has been scanned before; if not, it uploads the skill as a zip and waits up to three minutes for the verdict. Skills with no verdict, because the scan came back unknown, are let through like safe ones. It needs Python and network access to skillscan.tokauth.com.

Summarizes the skill at aca4fea.

openclaw skills install @tokauthai/skillscan

ClawHub page · All skills from clawhub.ai/tokauthai

Downloads: 181,973 on ClawHub, Sep 21, 2026

Category	category:skill-tools category:security category:software-engineering Find, write, vet and route to other skills. Compliance, guardrails, skill vetting and browser fingerprinting. Everything for building software: planning, coding, debugging, design, frameworks, cloud, agents and skills.
Type	type:tool Operates a CLI, API, app or bundled script to get something done.
Effect	effect:remote Its own steps change something outside your machine: post, send, deploy, provision, file issues, drive a website, or upload data to a service.
Needs	needs:none Instructions only. Works in any agent that supports skills.
Publisher	by:community Everyone else. Unverified vendor claims default to community.
Topics	skill-security security

SKILL.md

From ClawHub, version 1.1.6. Checked daily, last changed Oct 20, 2026.

Frontmatter

name: SkillScan
metadata:
  version: "1.1.6"
description: >
  Security gate for skills. Every new skill MUST pass SkillScan before use.
  Activate on any install, load, add, evaluate, or safety question about a skill.
  On first load, run first-run to scan all existing skills.
  Blocks HIGH/CRITICAL skills. No exceptions.

SkillScan v1.1.6

Security check for skill packages. Every new skill must pass this scan before use.

Implemented in scripts/scanner.py. Supports Windows / macOS / Linux.

Do NOT generate report files inside the skill directory.

When to Activate

Run SkillScan whenever a skill is installed, loaded, added, evaluated, or questioned for safety — regardless of method or phrasing.

Trigger examples: install, load, add, use, set up, "is this safe", upload .zip/.skill, paste SKILL.md, mention unknown skill name, install from hub/store.

First Load

Check scripts/.first_run_done:

Not found → Tell user SkillScan is installed, ask to scan all existing skills:
```
python <skill_scanner_dir>/scripts/scanner.py first-run
```
.first_run_done is created automatically after completion.
Found → Skip, operate normally.

Commands

Command	Usage
`scanner.py scan <path>`	Scan a single skill (.zip or directory)
`scanner.py scan-all`	Scan all installed skills
`scanner.py first-run`	First-time full scan
`scanner.py upgrade`	Manual upgrade

Scan Rules

.zip files → Scan BEFORE installation. Block if fails.
Directory installs (cp, mv, git clone, ln -s, any method) → Scan AFTER files land on disk.
Remote installs (clawhub, skillhub, npx skills add, etc.) → Scan immediately after install.
Unknown skills → If user mentions a skill you haven't seen, scan it.

Exit Codes

Code	Verdict	Action
`0`	UNKNOWN / SAFE	Proceed
`1`	LOW / MEDIUM	Warn user, ask to confirm
`2`	HIGH / CRITICAL	Block, show details
`3`	Scan failed	Explain, offer retry

Auto Update

Checks for updates every day automatically. Silent, no user action needed. Manual: scanner.py upgrade.

Environment Variables

Variable	Description
`SKILL_SCANNER_UPDATE_URL`	Custom update source (optional)

API

Base URL: https://skillscan.tokauth.com

Step	Method	Path
① Cache lookup	GET	`/oapi/v1/skill-scan/search?dir_sha256=<dir_sha256>`
② Upload	POST	`/oapi/v1/skill-scan/upload`
③ Poll result	GET	`/oapi/v1/skill-scan/result?task_no=<task_no>` (poll every 20s, max 180s)