public-scan

Scan Skill Endpoint

Grade an OpenClaw / Agent Skill in a GitHub repo — the capability surface a repo scan misses: the auto-exec allowed-tools grant, always-loaded- description injection, lifecycle-hook escalation, and env-exfil in bundled scripts. coverage.surface = openclaw. E.g. /public/scan/skill/owner/repo. The behavioral sandbox (plan skill) clones the repo and runs its hooks and scripts; the signed observation comes back in behavioral.

get/api/v1/public/scan/skill/{owner}/{repo}

Request

  • Base URL: https://agentavow.com (the document declares no server; this is the origin it was published from)
  • URL: https://agentavow.com/api/v1/public/scan/skill/{owner}/{repo}
  • Auth: none declared

Path parameters

ownerstring required
repostring required

Query parameters

forceboolean

Bypass cache and force a fresh scan

behavioralboolean

Force a fresh behavioral sandbox run: the skill is cloned and its lifecycle hooks and bundled scripts are run with canary credentials (implies a fresh scan). The run is also started automatically on the first scan.

Response

Successful Response

staleboolean
repostring required
trust_scoreinteger required
security_scoreinteger
trust_tierstring required
scan_resultstring required
verdictstring
verdict_reasonstring
decisionstring
decision_finalboolean
decision_reasonstring
capabilitiesobject[]
positive_signalsstring[]
gradestring

Deprecated legacy field; read decision, trust_score and certified.

certifiedobject
certified_markboolean
certified_mark_reasonstring
coverageobject
supply_chainobject
coverage_gapsobject
not_checkedstring[]
incident_historyobject
deprecationstring nullable
package_versionstring nullable
published_atstring nullable
behavioral_score_effectobject
provenanceobject
surface_detailobject
declared_scopeobject
env_readsstring[]
package_coordinateobject
tool_descriptionstring
long_descriptionstring
category_scoresobject
scanned_atstring required
cachedboolean
tool_manifest_digeststring nullable
tool_digestsobject
tool_listobject[]
skill_collectionobject nullable
tool_driftobject nullable
jwsstring required
algorithmstring
key_idstring
jwks_urlstring
entity_trustobject nullable
trust_envelopeobject nullable
behavioralobject nullable
score_notestring
gateway_infoobject

Changes

No recorded changes to this operation across all 1 revision of this API.