Individual skill

edgeone-clawscan

The first security skill to install after setting up OpenClaw — powered by Tencent Zhuque Lab. Works like an antivirus for your AI environment: audits installed skills, scans skills before installation, and performs a full OpenClaw security health check to prevent data leaks and privacy risks. Backed by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). Use when the user asks to start a security health check or security scan for the current OpenClaw environment, such as `开始安全体检`, `做一次安全体检`, `开始安全扫描`, `全面安全检查`, or `检查 OpenClaw 安全`; also use when the user asks to audit a specific skill before installation, review installed skills for supply chain risk, or investigate whether a skill is safe. Do not trigger for general OpenClaw usage, project debugging, environment setup, or normal development requests. Optional cloud mode: set AIG_CLOUD_LOOKUP=off for zero outbound HTTPS; when enabled, only skill_name, source label, and OpenClaw version are sent to A.I.G (never skill bodies, chats, or workspace files).

skills/edgeone-clawscan/SKILL.md

Read pinned source

Source commit 76146bf479b2fedb34f7acb7f536aa37b1f8ba74

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
Yes
Repository scan complete
No
Skill scan complete
No
Observed behavior
Network or broad shell
Last checked
Nov 9, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
7,469
Repository last updated
Nov 11, 2026
License
Apache-2.0

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

> **说明**:本 Skill 由腾讯朱雀实验室出品,一键全面扫描 OpenClaw 不安全配置、恶意 Skill 与漏洞。
> **关于云端 API**:供应链与 CVE 情报需要持续更新,仅靠本地静态文件无法覆盖「安装后被篡改的技能」与「每日新增的漏洞库」;因此默认会向 A.I.G 发起**最小化**查询(仅 skill 名+来源标签、以及 OpenClaw 版本号),**不会**上传 Skill 源码、对话或工作区文件。若策略不允许任何外联,请设置 `AIG_CLOUD_LOOKUP=off` 做纯本地扫描,或把 `AIG_BASE_URL` 指向自建实例。
> 安装前请对照官方仓库核验来源;集市「所有者」字段可能与本文 `author` 不一致,不代表密码学意义上的发布者证明。

---
# edgeone-clawscan

OpenClaw security scanning powered by AI-Infra-Guard ( https://github.com/Tencent/AI-Infra-Guard ).

## Configuration

`AIG_BASE_URL` (optional) — base URL for the AI-Infra-Guard API.
Defaults to `https://matrix.tencent.com/clawscan` (the public Tencent endpoint
declared in the `external_requests` metadata above).
Back to top