Skill Drift Guard

---

name: skill-drift-guard

description: Scan before trust, compare after updates. Local-first integrity and drift scanner for OpenClaw skills and repos with trusted baselines, symlink tracking, and heuristic risk checks.

---

# Skill Drift Guard

**Scan before trust. Compare after updates.**

Use this skill for **local integrity checks** and **post-update drift detection**.

This skill is intentionally narrower than generic security scanners. Its best use is:

Quick start

Run the scanner directly from the installed skill folder:

node ./scripts/cli.js scan <path>

Save a baseline after a trusted review:

node ./scripts/cli.js scan <path> --save-baseline ./reports/baseline.json

Compare a skill against a saved baseline:

node ./scripts/cli.js compare <path> --baseline ./reports/baseline.json

What it checks

- shell + network

- network + sensitive files

- shell + prompt-injection signals

- obfuscation + active capabilities

Best workflow

1. Pre-install review

Scan the candidate skill folder or cloned repo.

node ./scripts/cli.js scan /path/to/skill

Treat **high** or **critical** output as a stop sign until manually reviewed.

2. Establish trust baseline

Once you manually review a skill and accept it, save a baseline.

node ./scripts/cli.js scan /path/to/skill --save-baseline ./reports/skill-baseline.json

3. Re-check after updates

After the skill changes or updates, compare it to the saved baseline.

node ./scripts/cli.js compare /path/to/skill --baseline ./reports/skill-baseline.json

Look especially for:

Config suppressions

Use a `.driftguard.json` file in the scan root, or pass `--config <file>`.

Example:

{
  "ignorePaths": ["dist/", "fixtures/"],
  "ignoreRules": ["net.fetch", "shell.exec_generic", "shell.*"]
}

Use suppressions sparingly. If a rule is noisy, prefer narrowing it later instead of muting the whole category.

Exit codes

Use this for CI or install gating.

Positioning

Use this skill when you want a **transparent, local, deterministic integrity check**.

Do not use it as the sole authority for safety. It is a heuristic scanner plus drift guard, not a guarantee.