ict#

Basic Info#

• Description: Automated tool for checking Claw Skill quality, supports code style, security vulnerabilities, documentation completeness and code-documentation consistency
• Triggers: quality check, audit, inspect skill, skill quality, ICT, batch scan, full scan, security check, global scan
• Category: devtools
• Version: 4.0.8

⚠️ Security Notice: This tool contains malicious code pattern detection rules for static analysis. Detection rules contain keywords like exec, eval, C2 - this is normal for audit functionality and will not execute malicious code.

Installation#

Install from ClawHub#

bash

clawhub install ict

Manual Installation#

bash

# Clone or download this skill
cd ict

# Make executable
chmod +x ict.py

# Run directly
python3 ict.py --help

Usage#

CLI#

bash

# Single Skill Audit
python ict.py <skill_folder_path>
python ict.py <skill_folder_path> --json

# 5-Dimension Trust Score
python ict.py <skill_folder_path> --score

# Trend Tracking
python ict.py <skill_folder_path> --save-trend
python ict.py <skill_folder_path> --trend

# Compare Two Skills
python ict.py <skill_folder_path> --compare <other_skill_path>

# Diff Audit
python ict.py <old_folder_path> --diff <new_folder_path>

# Batch Scan
python ict.py --all
python ict.py --all --skills-dir /path/to/skills

API#

python

from ict import audit_skill
result = audit_skill("/path/to/skill-folder")

Features#

Security Checks (23 items)#

#CheckDescription1Credential HarvestCredential + network calls combo detection2Code Executioneval/exec/spawn3Data Exfiltrationwebhook.site, requestbin, ngrok URLs4Base64 ObfuscationEncoded payloads5Sensitive FS/etc/passwd, ~/.ssh, ~/.aws6Crypto WalletETH/BTC address detection7Dependency Confusion@internal, typosquatting8Install Hookspre/post install9Symlink AttackSymlink to sensitive paths10Time BombDelayed trigger11Remote Execcurl12TelemetryAnalytics SDK, tracking13Prompt Injection"ignore previous instructions"14Stealth ExfilHidden data transmission15C2 ServerC2 server detection16Container EscapeDocker socket escape17SSH RemoteSSH/scp commands18Privilege Escalationsudo, chmod 77719Hidden FilesAccess to .files23Unusual Ports4444, 5555, 1337, etc

Supported Languages#

• Python (.py)
• Shell (.sh, .bash)
• JavaScript/TypeScript (.js, .ts)

5-Dimension Trust Score (0-100)#

DimensionMaxDescriptionSecurity35Security check resultsQuality22Documentation completenessStructure18File structureTransparency15Version/license infoBehavioral10Code consistency

Grade: A(90+), B(75+), C(60+), D(40+), F(<40)

Quality Checks#

• SKILL.md completeness
• Code style (line length, syntax)
• Code-documentation consistency
• File structure

Batch Scan#

• One-click scan all installed Skills
• Global security report sorted by risk
• Statistics: safe/warning/danger

Trend Tracking#

• --save-trend Save score to history
• --trend View score trend
• Keep last 50 records

Comparison#

• --compare Side-by-side comparison
• Show dimension differences and winner

Diff Audit#

• --diff Compare old/new versions
• Identify new issues, fixed issues, regressions

Exit Code (CI/CD)#

CodeMeaning0PASS - Safe1REVIEW - Warnings2FAIL - Critical issues3Error

False Positive Prevention#

• PATTERN_DEF_FILTER - Auto-filter rule definitions
• Comment line filtering
• Allowlist support

Limitations#

• Some checks based on regex, may have false positives
• LLM analysis requires external tools

---

ict#

基本信息#

• 描述: 自动化检查 Claw Skill 质量的工具，支持代码风格，安全漏洞、文档完整性和代码文档一致性检查
• 触发词: 质检, audit, 检查skill, skill质量, ICT, 批量扫描, 全部扫描, 安全体检, 全局扫描
• 分类: devtools
• 版本: 4.0.8

⚠️ 安全说明: 本工具包含恶意代码模式检测规则，用于静态分析审计目标代码。检测规则本身包含 exec、eval、C2 等敏感关键字，这是正常的审计功能，不会执行任何恶意操作。

安装#

从 ClawHub 安装#

bash

clawhub install ict

手动安装#

bash

# 克隆或下载此 skill
cd ict

# 添加执行权限
chmod +x ict.py

# 直接运行
python3 ict.py --help

使用方法#

CLI#

bash

# 单个 Skill 审查
python ict.py <skill_folder_path>
python ict.py <skill_folder_path> --json

# 5维度信任评分
python ict.py <skill_folder_path> --score

# 趋势追踪
python ict.py <skill_folder_path> --save-trend
python ict.py <skill_folder_path> --trend

# 对比两个 Skills
python ict.py <skill_folder_path> --compare <other_skill_path>

# Diff审计
python ict.py <old_folder_path> --diff <new_folder_path>

# 批量扫描
python ict.py --all
python ict.py --all --skills-dir /path/to/skills

API#

python

from ict import audit_skill
result = audit_skill("/path/to/skill-folder")

功能#

安全检查 (23项)#

#检测项说明1凭证收集凭证+网络调用组合检测2代码执行eval/exec/spawn3数据外泄webhook.site, requestbin, ngrok4Base64混淆编码载荷5敏感文件系统/etc/passwd, ~/.ssh, ~/.aws6加密钱包ETH/BTC地址检测7依赖混淆@internal, 拼写抢注8安装钩子pre/post install9Symlink攻击符号链接敏感路径10时间炸弹延迟触发11远程执行curl12遥测追踪分析SDK, 追踪13提示词注入"忽略之前指令"14隐蔽数据外发隐藏数据传输15C2服务器C2服务器检测16容器逃逸Docker socket逃逸17SSH远程SSH/scp命令18权限提升sudo, chmod 77719隐藏文件访问.files23非寻常端口4444, 5555, 1337等

支持语言#

• Python (.py)
• Shell (.sh, .bash)
• JavaScript/TypeScript (.js, .ts)

5维度信任评分 (0-100)#

维度满分说明Security35安全检测结果Quality22文档完整性Structure18文件结构Transparency15版本/许可证信息Behavioral10代码一致性

评级: A(90+), B(75+), C(60+), D(40+), F(<40)

质量检查#

• SKILL.md完整性
• 代码风格
• 代码文档一致性
• 文件结构

批量扫描#

• 一键扫描所有已安装的Skills
• 按风险排序的全局安全报告
• 统计：安全/警告/危险

趋势追踪#

• --save-trend 保存评分到历史
• --trend 查看评分趋势
• 保留最近50条记录

对比分析#

• --compare 并排对比
• 显示各维度差异和胜出者

Diff审计#

• --diff 对比新旧版本
• 识别新增问题、修复问题、回归

Exit Code (CI/CD)#

退出码含义0PASS - 安全1REVIEW - 警告2FAIL - 严重问题3Error

防误报机制#

• PATTERN_DEF_FILTER - 自动过滤规则定义
• 注释行过滤
• 白名单支持

限制#

• 部分检测基于正则，可能存在误报
• LLM分析需外部工具