Monitor embedded advisory feeds and flag risky OpenClaw skills.
npx skills add https://github.com/prompt-security/clawsec --skill clawsec-suite
Please help me install this Agent Skill. Skill: clawsec-suite Source: https://github.com/prompt-security/clawsec/tree/main/skills/clawsec-suite Command: npx skills add https://github.com/prompt-security/clawsec --skill clawsec-suite
ClawSec Suite provides a centralized, automated security governance layer for OpenClaw agents by embedding an advisory-feed monitor, a heartbeat-driven update checker, and guarded install flows to detect and mitigate risky or malicious skills.
Install clawsec-suite using the clawhub installer and run the heartbeat to begin advisory monitoring and protection.
High-intent search queries and answers about installing and using this skill.
An advisory feed monitor cross-references installed OpenClaw, MoltBot, and Clawdbot skills against embedded security advisories to detect high-risk components. Heartbeat checks poll advisories and track state to surface actionable remediation guidance.
Guarded installation flows use a guardhook to intercept advisory actions and enforce double-confirmation before removing or disabling risky skills. This prevents unauthorized or malicious skill installations across OpenClaw, MoltBot, and Clawdbot environments.
Yes, the security suite applies across installed OpenClaw, MoltBot, and Clawdbot environments. It cross-references advisory feeds with local skills across all supported agent platforms for unified security governance and monitoring.
Automating OpenClaw security governance involves embedding an advisory-feed monitor, heartbeat update checks, and guarded install flows. This centralized layer polls advisories, tracks state, and surfaces remediation guidance automatically via SKILL.md and scripts.
Yes, the guardhook enforces double-confirmation before removing or disabling risky skills flagged by advisory feeds. This prevents accidental or automated removals by requiring explicit user confirmation for advisory actions across OpenClaw environments.
Heartbeat polling is needed when you want to continuously track advisory updates and surface actionable guidance for safe remediation. It enables stateful checks to poll advisories and monitor installed OpenClaw skills for emerging risks.
prompt-securityIntegrate a live advisory feed to surface OpenClaw security advisories.
pohlai88Poll security advisories for OpenClaw vulnerabilities and malicious skills.
ramirlmMonitor security advisories and detect vulnerabilities in installed AI skills.
RIMTHAN-LABAnalyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.
