clawtower

Monitors Linux hosts for OS-level threats, tampering, and policy violations.

4|1|Updated Feb 14, 2026
One-click install
npx skills add https://github.com/ClawTower/ClawTower --skill clawtower
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: clawtower
Source: https://github.com/ClawTower/ClawTower/tree/main/skill
Command: npx skills add https://github.com/ClawTower/ClawTower --skill clawtower

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

ClawTower is a tamper-proof OS-level security watchdog designed to protect AI agents by monitoring the host for threats, tampering, and policy violations, ensuring the agent cannot disable or modify it.

Core Features & Use Cases

  • Tamper-proof, OS-level monitoring using auditd, inotify, network policy, and file integrity checks to detect and alert on threats or policy violations.
  • Immutable binaries and swallowed key security model to prevent tampering and ensure accountability; supports admin-side workflows via clawsudo, restore-keys, and compliance tooling.
  • Integrations for dashboards and alerts (TUI, web dashboard, Slack) and APIs for status, health, and evidence, along with compliance reporting and auditing commands.

Quick Start

Install ClawTower non-interactively using the on-shot installer to bootstrap on a Linux host.

Frequently Asked Questions about clawtower

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor my Linux host for OS-level tampering and threats targeting AI agents?

You can monitor Linux hosts for OS-level tampering by deploying a watchdog that applies auditd, inotify, network policy, and file integrity checks to detect threats and policy violations against your AI agents.

What is a swallowed key tamper-proof pattern for AI agent security?

The swallowed key tamper-proof pattern prevents AI agents from disabling or modifying the security watchdog by hiding the admin key, ensuring accountability through immutable binaries and Argon2-hashed admin keys.

How do I install a tamper-proof OS watchdog on a Linux host non-interactively?

You can install a tamper-proof OS watchdog on Linux non-interactively by using the one-shot installer to bootstrap the host, applying immutable binaries and configuring dashboard, API, and clawsudo workflows.

Does the OS-level monitoring watchdog support Slack alerts and compliance reporting?

Yes, the OS-level monitoring watchdog supports Slack alerts, TUI, and web dashboards for notifications, alongside APIs for status, health, and evidence, plus compliance reporting and auditing commands.

Can I use clawsudo for privilege escalation workflows when managing agent security policies?

Yes, you can use clawsudo for admin-side privilege escalation workflows when managing agent security policies, including restore-keys, compliance tooling, and incident response on Linux hosts.

Why do I need immutable binaries for protecting AI agents from OS-level threats?

Immutable binaries are needed to prevent the AI agent from disabling or modifying the security watchdog, ensuring host monitoring remains tamper-proof and maintains accountability during incident response.