Scan Claw-family deployments for security risks and hardening guidance.
npx skills add https://github.com/g1at/ClawLock --skill clawlock
Please help me install this Agent Skill. Skill: clawlock Source: https://github.com/g1at/ClawLock/tree/main/skill Command: npx skills add https://github.com/g1at/ClawLock --skill clawlock
ClawLock 提供面向 Claw-family 部署的综合安全解决方案，解决跨平台环境中安全扫描、红队演练与系统加固的需求，帮助企业快速发现配置风险、潜在漏洞与合规问题，并给出清晰的改进路径。
安装 clawlock 并执行一次全面扫描以评估当前环境的安全性。
High-intent search queries and answers about installing and using this skill.
A comprehensive security scan and hardening check requires installing the clawlock package, then executing a full scan to assess your environment's configuration risks, potential vulnerabilities, and compliance issues across Linux, macOS, Windows, and Android.
An OWASP ASI Agent-Scan is a built-in deep analysis feature for red-team readiness that checks agent security. You need it to proactively identify potential vulnerabilities and configuration risks in your Claw-family deployments without relying on external tools.
The security scanner works offline by default for local analysis, but offers optional cloud intelligence for threat intelligence and CVE queries. This flexible approach adapts to your security requirements whether you have network access or not.
Yes, you can audit a single Skill before importing it into your Claw environment. The tool supports independent auditing and pre-import checks for individual Skills to ensure they meet your security and compliance standards.
You need Python >= 3.9, the clawlock package, and the clawlock binary for basic red-team readiness checks. The promptfoo dependency is optional and only required if you want to enable advanced red-team workflows.
The best way to get JSON, text, and HTML reports for MCP deep scanning is to run the built-in multi-engine analysis. It generates these multiple output formats natively, reducing your dependency on external reporting tools.
sumik5Evaluate LLM outputs and run red-team tests with promptfoo.
sugarforeverScan Next.js and TypeScript/JavaScript projects for security vulnerabilities.
dapperdiversAggregate threat intelligence feeds and vulnerability data into daily security briefings.
statick88Automate vulnerability detection across code, dependencies, containers, and infrastructure.
