No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by slowmist · Agent Tool · ★ 506
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is slowmist-agent-security safe to install? View the security audit →
SlowMist Agent Security Skill 🛡️ A comprehensive security review framework for AI agents operating in adversarial environments. Core principle: Every external input is untrusted until verified. Overview This skill provides a structured security review framework for OpenClaw agents, covering: Skill/MCP Installation — Detect malicious patterns before installation GitHub Repository Review — Audit codebases for security issues URL/Document Analysis — Scan for prompt injection and social engineering On-Chain Address Review — AML risk assessment and transaction analysis Product/Service Evaluation — Architecture and permission analysis Social Share Review — Validate tools recommended in chats Installation Option 1: Direct Download Download the latest release and extract to your OpenClaw workspace: Option 2: ClawHub (when available) Quick Start Once installed, the agent will automatically reference this framework when encountering: Skill/MCP installation requests Unknown GitHub repositories External URLs or documents Blockchain addresses Product/service recommendations Framework Structure slowmist-agent-security/ ├── SKILL.md # Main framework documentation ├── README.md # This file ├──...
| Stars | 506 |
| Forks | 29 |
| Category | Agent Tool |
| License | MIT |
| Quality Score | 73.3915195694789/100 |
| Last Updated | 2026-04-17 |
| Created | 2026-03-23 |
| Est. Tokens | ~5k |
Looking for a slowmist-agent-security alternative? If you're comparing slowmist-agent-security with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
This repository contains a collection of Agent Skills developed by GudaStudio, enabling seamless collaboration
A collection of standardized Agent Skills to teach GitHub Copilot, Claude, Gemini and Cursor about modern Andr
Claude Code Skill Factory — A powerful open-source toolkit for building and deploying production-ready Claude
A collection of Agent skills and Claude Code plugins for HashiCorp products.
Lightweight registry to discover, install, and manage all public Claude plugins and agent skills for your favo
A Claude Code skill that turns PDFs, docs, and codebases into Obsidian study vaults
Explore other popular agent tool tools:
slowmist-agent-security is SlowMist Agent Security Skill: A comprehensive security review framework for AI agents operating in adversarial environments. Core principle: Every external input is untrusted until verified.. It is categorized as a Agent Tool with 506 GitHub stars.
You can find installation instructions and usage details in the slowmist-agent-security GitHub repository at github.com/slowmist/slowmist-agent-security. The project has 506 stars and 29 forks, indicating an active community.
slowmist-agent-security is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to slowmist-agent-security on Agent Skills Hub include skills, awesome-android-agent-skills, claude-code-skill-factory. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: