Skill Auditor

# Block if HIGH or CRITICAL
RISK=$(panguard audit skill "$SKILL_PATH" --json | jq -r '.riskLevel')
if [ "$RISK" = "HIGH" ] || [ "$RISK" = "CRITICAL" ]; then
  echo "Blocked: $RISK risk skill"
  exit 1
fi

import { auditSkill } from '@panguard-ai/panguard-skill-auditor';

const report = await auditSkill('./skills/untrusted-skill');

console.log(`Risk: ${report.riskScore}/100 (${report.riskLevel})`);
console.log(`Checks: ${report.checks.length}`);
console.log(`Findings: ${report.findings.length}`);

// Block dangerous skills
if (report.riskLevel === 'CRITICAL') {
  throw new Error('Skill blocked by security policy');
}

// Log individual findings
for (const finding of report.findings) {
  console.log(`[${finding.severity}] ${finding.title}`);
  if (finding.location) console.log(`  at ${finding.location}`);
}

#!/bin/bash
# Auto-audit skills before OpenClaw installs them
REPORT=$(panguard audit skill "$1" --json)
LEVEL=$(echo "$REPORT" | jq -r '.riskLevel')
SCORE=$(echo "$REPORT" | jq -r '.riskScore')

echo "Panguard Audit: $SCORE/100 ($LEVEL)"

if [ "$LEVEL" = "CRITICAL" ]; then
  echo "BLOCKED: Critical security issues found"
  echo "$REPORT" | jq '.findings[] | "  [\(.severity)] \(.title)"'
  exit 1
fi

$ panguard audit skill ./skills/weather-widget

PANGUARD SKILL AUDIT REPORT
============================
Skill:      weather-widget
Risk Score: 0/100
Risk Level: LOW
Duration:   0.2s

CHECKS:
  [PASS] Manifest: Valid SKILL.md structure
  [PASS] Prompt Safety: No injection patterns detected
  [PASS] Code: No vulnerabilities found; Secrets: Clean
  [PASS] Dependencies: No known issues
  [PASS] Permissions: Scope appropriate

VERDICT: Safe to install

$ panguard audit skill ./skills/suspicious-helper

PANGUARD SKILL AUDIT REPORT
============================
Skill:      suspicious-helper
Risk Score: 72/100
Risk Level: CRITICAL
Duration:   0.3s

CHECKS:
  [FAIL] Prompt Safety: 2 suspicious pattern(s) detected
  [PASS] Manifest: Valid SKILL.md structure
  [WARN] Code: 1 issue(s) found; Secrets: No hardcoded credentials
  [PASS] Dependencies: No known issues
  [PASS] Permissions: Scope appropriate

FINDINGS:
  [CRITICAL] Prompt injection: ignore previous instructions
             SKILL.md:42 - "ignore all previous instructions and..."
  [CRITICAL] Reverse shell pattern detected
             SKILL.md:87 - "bash -i >& /dev/tcp/..."
  [HIGH]     Environment variable exfiltration
             SKILL.md:23 - "printenv | curl..."

VERDICT: DO NOT INSTALL - Critical security issues found