protocol-doc-auditor
Helps detect hidden attacks in API and protocol documentation. Scans integration guides for dangerous instructions like curl|bash, credential harvesting, and irrevocable identity bindings disguised as setup steps.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/andyxinweiminicloud/protocol-doc-auditorWhat This Skill Does
The protocol-doc-auditor is an essential security tool designed for developers and AI agents alike. It acts as a specialized verification layer that sits between external protocol documentation and the execution environment. By parsing Markdown, plain text, or live URLs, it scans for 'shadow' attack vectors that standard static analysis tools miss. It specifically targets dangerous patterns that rely on the user's trust, such as piping remote scripts to shells (curl | bash), insecure credential handling, and opaque identity binding. The skill evaluates instructions for technical validity versus security risks, providing a clear risk rating and actionable remediation advice.
Installation
To install this skill, use the ClawHub CLI command within your OpenClaw environment: clawhub install openclaw/skills/protocol-doc-auditor. Ensure your environment has the necessary permissions to access external URLs if you plan to scan live documentation pages directly.
Use Cases
- Security Vetting: Audit internal developer portals before onboarding new third-party APIs.
- Agent Safety: Use it as a pre-execution check for AI agents to ensure they don't blindly follow malicious setup instructions found in public repositories.
- Compliance Checking: Verify that integration guides for your own product adhere to security best practices and do not inadvertently teach users insecure habits.
- Risk Mitigation: Protect production systems from 'copy-paste' attacks that exploit developer haste.
Example Prompts
- "Audit this integration guide for the Acme Cloud SDK: [URL] and tell me if any steps pose a security risk to my server."
- "I'm following these documentation steps: [Paste Content]. Please check for credential exposure or hidden telemetry calls."
- "Is this curl command safe to run on my machine, or does it attempt privilege escalation? [Command String]"
Tips & Limitations
- Context is Key: While the auditor detects patterns, it cannot determine the intent of the documentation author; always treat high-risk findings with extreme skepticism.
- Scope: The tool works best on text-based documentation. It does not perform dynamic analysis of remote binaries or scripts; it only analyzes the instructions provided for those actions.
- False Positives: Occasionally, legitimate diagnostic commands requiring
sudomay be flagged as privilege escalation; review these carefully in the context of the requested installation procedure.
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-andyxinweiminicloud-protocol-doc-auditor": {
"enabled": true,
"auto_update": true
}
}
}Tags(AI)
Flags: network-access, external-api
Related Skills
skill-update-delta-monitor
Helps detect security-relevant changes in AI skills after installation. Tracks deltas between the audited version and current version, flagging updates that expand permissions, add new network endpoints, or alter behavior in ways that bypass install-time security checks.
delta-disclosure-auditor
Helps verify that skill updates publish an auditable record of what changed — catching the gap between "the registry shows the new version" and "anyone can see what the new version changed relative to the old one." v1.1 adds risk-class binding, chain-of-custody verification, and update eligibility assessment.
capability-composition-analyzer
Helps identify dangerous capability combinations that emerge when agent skills are composed — catching the class of risk where no individual skill is harmful but their intersection creates an exfiltration or compromise path.
transparency-log-auditor
Helps verify that skill signing events are recorded in an independently auditable transparency log — catching the class of trust failures where a registry operator can silently rewrite history without detection.
observer-effect-probe
Helps detect skills that behave differently when they sense they are being monitored — catching the class of evasion where conditional activation logic specifically targets attestation and sandbox environments.