clawsec-feed

Integrate a live advisory feed to surface OpenClaw security advisories.

1.1k|114|Updated Feb 5, 2026
One-click install
npx skills add https://github.com/prompt-security/clawsec --skill clawsec-feed
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: clawsec-feed
Source: https://github.com/prompt-security/clawsec/tree/main/skills/clawsec-feed
Command: npx skills add https://github.com/prompt-security/clawsec --skill clawsec-feed

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OpenClaw security relies on timely threat intelligence; this skill provides an automated advisory feed that surfaces CVEs, malicious patterns, and prompt-injection indicators affecting OpenClaw-related components.

Core Features & Use Cases

  • Real-time advisories: aggregates OpenClaw CVEs and community-reported incidents
  • Cross-reference detection: checks installed clawsec skills against current advisories
  • Remediation guidance: suggests updates or removals based on advisory details
  • Flexible deployment: usable with the full ClawSec suite or as a standalone advisory feed

Quick Start

Save this SKILL.md as SKILL.md in ~/.openclaw/skills/clawsec-feed and follow the deployment steps to activate the advisory feed.

Frequently Asked Questions about clawsec-feed

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor security advisories for OpenClaw environments?

The advisory feed detects CVEs, malicious patterns, and prompt-injection indicators affecting OpenClaw components. It checks installed skills against current advisories to surface vulnerabilities and suggest updates or removals based on advisory details.

What do I need to set up the OpenClaw advisory feed?

You can use this advisory feed with AI agents running OpenClaw, Clawdbot, or Moltbot environments. It operates from the ~/.openclaw/skills/clawsec-feed directory and exposes versioned advisory data in a machine-readable format for downstream tools to consume.

How does the cross-reference detection for installed skills work?

The feed is usable with the full ClawSec suite or as a standalone advisory feed. Running it standalone provides real-time CVE aggregation and community-reported incident monitoring without requiring the entire ClawSec deployment infrastructure.

Are there limitations to using a standalone security advisory feed?

The advisory feed relies on curl and jq, requiring both tools to be present in your environment. It surfaces advisories affecting installed skills but requires downstream tools to consume the machine-readable versioned data for automated remediation actions.