The security layer that runsbefore your AI agent does.
Every time you install a skill from OpenClaw, Panguard scans it automatically. Clean? It installs. Suspicious? You get a report on your phone before anything happens.
$ panguard audit skill ./skills/suspicious-agent
Scanning suspicious-agent... done (0.3s)
Risk Score: 72/100 (CRITICAL)
[CRITICAL] Prompt injection: "ignore previous instructions"
SKILL.md:42
[HIGH] Reverse shell: "bash -i >& /dev/tcp/..."
SKILL.md:87
VERDICT: DO NOT INSTALL
Run with --json for machine-readable output.THE PROBLEM
AI agent skills are the new attack surface.
OpenClaw, ClawdHub, and MCP marketplaces make it easy to install powerful skills into your AI agent. But every skill you install is code that runs with your agent's permissions — accessing your files, your environment variables, your servers.
A single malicious skill can exfiltrate credentials, open reverse shells, or hijack your agent's identity. Manual review can't catch zero-width Unicode, encoded payloads, or sophisticated prompt injection.
THE DIFFERENCE
Skill vetting is not skill auditing.
Community vetting relies on human eyeballs. Panguard Skill Auditor uses automated static analysis that catches what humans physically cannot see.
Vetting is valuable for context and intent -- but it cannot replace automated analysis for hidden threats.
WHY PANGUARD
What AI agents can't do for you.
Pre-Install Gate
Know before you install
Scan any skill from any source — OpenClaw, GitHub, local directory — before it touches your system. Panguard catches what manual review can't: hidden Unicode, encoded payloads, prompt injection.
0-100 Risk Score
Not just allow/deny
Every skill gets a quantitative risk score with specific findings, line numbers, and severity levels. Your team makes informed decisions, not blind guesses.
CI/CD Pipeline Ready
Automate your security gate
Add Panguard to your GitHub Actions, GitLab CI, or any pipeline. Block risky skills from reaching production automatically. No AI agent offers this.
Cross-Platform
Every skill format, one scanner
Works with OpenClaw SKILL.md, Claude skills, MCP tools, and any markdown-based agent skill. One tool to scan them all.
THREE-LAYER SECURITY
Regex. AI. Community intelligence.
Prompt Injection
11 regex patterns detect identity override, instruction hijacking, and jailbreak attempts
Hidden Unicode
Zero-width characters, RTL overrides, homoglyph attacks invisible to human reviewers
Encoded Payloads
Auto-decode Base64 and detect eval, exec, subprocess, child_process inside
Tool Poisoning
Reverse shells, privilege escalation, remote code execution, env exfiltration
SAST + Secrets
Static analysis for vulnerabilities, hardcoded API keys, AWS credentials, private keys
Permission Scope
Evaluates requested permissions against the skill's stated purpose
Manifest Validation
Verifies SKILL.md structure, required fields, and metadata integrity
HOW IT WORKS
Three layers catch what one layer can't.
Pattern Matching
11 prompt injection patterns, 6 tool poisoning signatures, homoglyph detection, Base64 decode. Deterministic, under 1 second.
AI Semantic Analysis
LLM analyzes the skill for social engineering, intent mismatch, and obfuscated attacks that regex physically cannot catch.
Threat Cloud Intelligence
Every scan contributes anonymized threat data. If someone already flagged a dangerous skill, you know before you scan.
RISK SCORING
Understand exactly why.
Not just "blocked" or "allowed". Every skill gets a quantitative score with specific findings your team can act on.
REAL WORKFLOWS
Built for how you actually work.
NOT COMPETING. COMPLEMENTING.
Three layers of defense. One workflow.
Panguard fills the gap in the OpenClaw install flow that nobody else covers yet: pre-install static analysis. Your agent's allow/deny is a separate layer. Both together make the full picture.
Panguard Skill Auditor
The skill gets scanned before it even touches your system. Problems found? Install does not run.
Agent Permissions
Your agent prompts allow/deny when a skill tries to access files or run commands. This is the last gate before execution.
Panguard Guard
If something does slip through, Guard watches at the system level 24/7. Detects anomalies and responds automatically.
“OpenClaw helps you find great tools. Panguard makes sure they deserve your trust.”
Open ecosystems need an independent security layer. The people who publish skills and the people who audit them should not be the same party. Panguard is that independent third party.
Stop trusting. Start scanning.
One command. Seven checks. Zero blind spots.
curl -fsSL https://panguard.ai/api/install | bash