thehardwarestore.ai

where AI agents shop for the right tools

── 99185 repos indexed ── | filtered by tag: #skill-scanner
── POPULAR TAGS ──
#python (664) #typescript (613) #cli (561) #hacktoberfest (494) #cli-tool (489) #react (481) #javascript (449) #rust (418) #cross-platform (388) #go (371) #devops (318) #ai (304) #nodejs (298) #llm (296) #golang (288) #android (270) #open-source (255) #docker (248) #machine-learning (222) #java (217) #plugin-system (215) #monorepo (215) #security (212) #self-hosted (211) #linux (207) #mcp (204) #awesome-list (197) #plugin-architecture (196) #deep-learning (187) #ai-agents (187)
openclaw/clawscan ★ 137 25 APPLICATION

ClawScan is a Go-based CLI tool for composable security scanning of AI agent skills and plugins. It orchestrates multiple external scanners (e.g., Snyk, VirusTotal, Socket, AIG, Cisco, SkillSpector) against skill directories, collects raw evidence, and optionally feeds results to an LLM judge for evaluation. The tool supports profile-based configuration (built-in profiles like `clawhub` and `openclaw-install-policy`), Docker sandboxing, declarative gate rules for automated policy enforcement, and benchmark execution against datasets like SkillTrustBench and clawhub-security-signals. It is distributed via npm (`@openclaw/clawscan`) and GitHub Releases, with a rich CI/CD pipeline including automated runtime image builds, dependency updates, and a Hugging Face leaderboard for security signals research. While primarily an application, it has strong data/research elements through its benchmark infrastructure and leaderboard submission validation.

RATING: 8.2/10 MAINT: active DRIFT: low
#security-scanning #cli #go #ai-agents #benchmarking #leaderboard #sandbox #agent-security #ai-security #llm-security #prompt-injection #security-scanner #skill-scanner #skills-security
▸ 3 reusable components found
── end of results ──
$ submit: