guardskills

# GuardSkills — Security Scanner for Skills

Static analysis security gate. Scans skill files for malicious patterns and produces a risk decision before allowing installation.

## Rule — ALWAYS scan before installing

Before installing any skill (ClawHub, GitHub, local, or skills.sh), you MUST run a guardskills scan first. Never run `clawhub install`, `skills add`, or copy skill files without scanning.

## Scan by source

### 1. ClawHub skills

When the user asks to install a ClawHub skill, scan it first:

```bash
guardskills scan-clawhub <owner/skill-slug>
```

Also accepts full URLs:

```bash
guardskills scan-clawhub https://clawhub.ai/owner/skill-slug
```

### 2. Local skills

When loading or reviewing a skill folder on disk:

```bash
guardskills scan-local <path-to-skill-folder>
```

If the path contains multiple skills:

```bash
guardskills scan-local <path-to-skills-root> --skill <skill-folder-name>
```

### 3. GitHub skills

When installing from a GitHub repository:

```bash
guardskills add owner/repo --skill <skill-name> --dry-run
```

Also accepts full URLs:

```bash
guardskills add https://github.com/owner/repo --skill <skill-name> --dry-run
```

### 4. skills.sh skills

Use the same GitHub flow:

```bash
guardskills add owner/repo --skill <skill-name> --dry-run
```

If scan passes:

```bash
guardskills add owner/repo --skill <skill-name>
```

## How to interpret results

| Decision       | Action                                                       |
| -------------- | ------------------------------------------------------------ |
| `SAFE`         | Proceed with installation.                                   |
| `WARNING`      | Ask the user for confirmation before proceeding.             |
| `UNSAFE`       | Block. Tell the user the skill is unsafe and do not install.  |
| `CRITICAL`     | Block. Do not install under any circumstances.               |
| `UNVERIFIABLE` | Block. In...