# ClawScan 📡

ClawScan is a composable security scanning harness for agent skills.

Run a suite of skill security scanners, pass the results to a judge harness, and compare against multiple skill security benchmarks.

[](https://github.com/openclaw/clawscan/actions/workflows/ci.yml?query=branch%3Amain) [](https://github.com/openclaw/clawscan/actions/workflows/release.yml) [](https://github.com/openclaw/clawscan/releases)

## Quick Start

Install ClawScan:

```bash npm install -g @openclaw/clawscan ```

Command-backed scanners and judges run in ClawScan's Docker runtime by default, so keep Docker running for local scans.

Run NVIDIA SkillSpector and Cisco Skill Scanner against a local `skills/` folder:

```bash clawscan --scanner skillspector --scanner cisco ```

## Scan a known malicious skill

This example scans Trail of Bits' [`csv-summarizer`](https://github.com/trailofbits/overtly-malicious-skills/tree/4ffbf9461ef0505f9ce76a0d3694a18ec33ea531/skills/csv-summarizer) skill, which claims to summarize a CSV file but also prints every environment variable when run.

```bash git clone https://github.com/trailofbits/overtly-malicious-skills.git /tmp/overtly-malicious-skills cd /tmp/overtly-malicious-skills git checkout 4ffbf9461ef0505f9ce76a0d3694a18ec33ea531 clawscan skills/csv-summarizer \ --scanner skillspector \ --scanner cisco \ --output /tmp/clawscan-csv-summarizer.json ```

Sample findings:

```txt targets: 1 scanner_completed: 2 scanner_failed: 0 scanner_skipped: 0 issues_found: 2 gate: pass errors: 0 full_results: /tmp/clawscan-csv-summarizer.json ```

The results bundle keeps the top-level artifact plus per-scanner JSON reports.

<details> <summary>Artifact excerpt</summary>

```json { "schemaVersion": "clawscan-run-v1", "target": "skills/c