clawsec-suite

Monitors advisory feeds and flags high-risk matches for installed skills.

Updated Feb 23, 2026
One-click install
npx skills add https://github.com/pohlai88/AFENDA-NEXUS --skill clawsec-suite-pohlai88
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: clawsec-suite
Source: https://github.com/pohlai88/AFENDA-NEXUS/tree/main/.agents/skills/clawsec-suite
Command: npx skills add https://github.com/pohlai88/AFENDA-NEXUS --skill clawsec-suite-pohlai88

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, shasum, openssl, and includes scripts (resource) components.

What problem does it solve?

ClawSec-suite provides centralized management and monitoring of security advisories for locally installed skills, ensuring signed feeds, audit trails, and safe remediation guidance.

Core Features & Use Cases

  • Embedded advisory feed monitoring with stateful tracking
  • Signature and checksum verification to ensure feed integrity
  • Guidance and gating for malicious or removal advisories with double confirmation
  • OpenClaw hook integration to alert on matches and assist with safe remediation

Quick Start

Install clawsec-suite and run the heartbeat to start monitoring advisories against installed skills.

Frequently Asked Questions about clawsec-suite

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor security advisories for locally installed skills?

Security advisory monitoring involves polling trusted feeds and cross-referencing new advisories against your installed skill inventory to flag high-risk matches. This process tracks vulnerabilities statefully and alerts you to relevant threats.

How does cryptographic verification work for advisory feeds?

Cryptographic verification for advisory feeds enforces signature and checksum validation using openssl and shasum. This ensures feed integrity and prevents tampered or malicious advisories from being processed by your system.

Do I need curl and jq to automate security advisories?

Yes, curl and jq are required dependencies to automate security advisory polling and JSON parsing. OpenSSL and shasum are additionally needed to execute the cryptographic signature and checksum verification processes.

What is the best way to safely remove malicious skills?

The best way to safely remove malicious skills is to use a gating mechanism requiring explicit double confirmation before modifying or removing anything. This ensures safe remediation by preventing accidental or unauthorized deletions during advisory response.