Security First

Our security scoring system helps you identify safe, trustworthy AgentSkills for your OpenClaw deployment.

Understanding Security Scores

High Security (80-100)

Excellent security practices, minimal permissions, regular updates, and strong community trust.

Medium Security (60-79)

Generally safe but may have some concerns like broad permissions or limited updates.

Low Security (0-59)

Significant security concerns. Use with caution and only in isolated environments.

How We Score Security

Code Quality

25% weight
🔴
Type Safety
Uses TypeScript or similar type checking
🔴
Error Handling
Proper error handling and logging
🟡
Code Documentation
Clear comments and documentation
🟡
Code Style
Consistent coding style and patterns

Permissions & Access

30% weight
🔴
Minimal Permissions
Requests only necessary permissions
🔴
Permission Justification
Clear explanation for each permission
🔴
User Consent
Obtains user consent for sensitive actions
🟡
Access Controls
Proper access control mechanisms

Data Handling

20% weight
🔴
Data Encryption
Encrypts sensitive data at rest and in transit
🔴
Data Minimization
Collects only necessary data
🟡
Data Retention
Clear data retention policies
🟡
Third-party Sharing
Transparent about data sharing

Community & Maintenance

25% weight
🔴
Update Frequency
Regular updates and maintenance
🔴
Issue Response
Responsive to security issues
🟡
Community Reviews
Positive community feedback
🟡
Transparency
Open about security practices

Top Skills by Security Score

Live data from ClawHub — updated every 5 minutes

Full Leaderboard →

Security Best Practices

Check Permissions

Always review the permissions a skill requests. More permissions = higher risk.

Review Code Quality

Look for skills with good documentation, error handling, and type safety.

Check Update History

Regularly updated skills are more likely to have security fixes.

Read Community Reviews

Community feedback often reveals security concerns not caught in audits.

Want to Audit Your Skill?

Submit your AgentSkill for a free security audit. Get detailed feedback and improve your security score.

Average audit time: 3-5 business days • Free for open-source skills