open-source update: you can give a new OpenClaw Skill a quick safety check with one line in chat.
ClawScan is AI-Infra-Guard's module for this. It looks for potentially malicious Skills, exposed credentials, and known CVEs, then returns a report.
• AI-Infra-Guard was selected for Black Hat Arsenal
• its vulnerability database covers 2,000+ CVE rules across 146 AI components, including Ollama and ComfyUI
AI-Infra-Guard is an open-source, self-hosted red-teaming platform for AI builders.
• Scan AI infrastructure for fingerprints and CVEs
• Audit MCP servers and Agent Skills
• Red-team Agent workflows and LLMs
• Run locally with Docker; integrate via Web UI or API
Build with more visibility: