clawsec-scanner

Automate vulnerability scanning by integrating a scanner into your CI/CD pipeline to detect software dependency flaws and OpenClaw hook handler issues. This Skill unifies dependency checks, static code analysis, and CVE database queries into a single automated workflow.

Semgrep works alongside bandit to perform static code analysis for vulnerability detection. Semgrep handles broad static code analysis while bandit targets Python-specific code vulnerabilities, providing unified reporting with severity classification.

Scanning Python and npm dependencies for vulnerabilities requires running pip-audit and npm audit. This Skill automates both tools to analyze dependencies and queries multiple CVE databases to provide consolidated vulnerability reports.

You need jq and curl to integrate OpenClaw continuous monitoring for vulnerability detection. These dependencies process API responses and query external CVE databases to fetch vulnerability information during automated scanning workflows.

Dynamic analysis inspects OpenClaw hook handlers through a DAST framework that evaluates runtime behavior for security flaws. This Skill automates the detection of vulnerabilities in hook handlers and integrates with OpenClaw for continuous monitoring.