skills.rest
marcoamu
marcoamuCOMMUNITY
Explore all skills by this author →
GitHub

openclaw-security-monitor

Scan OpenClaw skill packages for malicious patterns and security threats.

1|Updated Mar 14, 2026
Search Tags:#automation#remediation#dashboard#threat-detection#openclaw#security-monitoring#ioc-database
One-click install
npx skills add https://github.com/marcoamu/openclaw-workspace --skill openclaw-security-monitor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: openclaw-security-monitor
Source: https://github.com/marcoamu/openclaw-workspace/tree/main/skills/openclaw-security-monitor
Command: npx skills add https://github.com/marcoamu/openclaw-workspace --skill openclaw-security-monitor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Proactive security monitoring and threat intelligence integration for OpenClaw deployments, reducing risk from malicious skills and misconfigurations.

Core Features & Use Cases

  • Real-time 40-point security scan covering C2 infrastructure, memory poisoning, SSRF, WebSocket security, and more.
  • IOC database with known malicious endpoints, publishers, and auto-updating feeds.
  • Web dashboard with process trees, network activity, and Telegram alerts to accelerate incident response.

Quick Start

Clone the repository into your OpenClaw skills directory and make the scripts executable.

Frequently Asked Questions about openclaw-security-monitor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor my local skill packages for malicious security patterns?▼

You can monitor local skill packages for malicious patterns by running a 40-point security scan that detects C2 infrastructure, memory poisoning, and SSRF, using scripts integrated into your local OpenClaw environment.

What is the best way to detect C2 infrastructure and SSRF vulnerabilities in my deployments?▼

The best way to detect C2 infrastructure and SSRF vulnerabilities is using a real-time security monitor that analyzes local skill packages against a 40-check scanner and an auto-updating IOC database.

How does automated remediation work when a security threat is detected?▼

Automated remediation works by triggering alerts and predefined scripts via Telegram when the IOC database and 40-check scanner identify malicious endpoints, publishers, or misconfigurations in your deployment.

Do I need OpenClaw installed to use these security monitoring scripts?▼

Yes, you need OpenClaw installed with access to a local ~/.openclaw directory, as the security monitoring scripts and dashboard configurations require this environment to run scans and process threat intelligence.

Can I visualize network activity and process trees during an incident response?▼

Yes, you can visualize network activity and process trees using the provided web dashboard, which integrates Telegram alerts to accelerate your incident response and threat analysis.

Related Skills

Explore More Software Engineering Skills→
ob-labsob-labs
30

install-memory-powermem

Install and configure the memory-powermem plugin for OpenClaw with bundled powermem-ts.

Official
Basic
shogo-labsshogo-labs
12

escalation-alert

Escalate critical incidents to designated team channels with structured alert messages.

Official
Intermediate
gl0bal01gl0bal01
44

malware-dynamic-analysis

Execute malware samples in sandboxes and capture runtime behavior with monitoring tools.

Community
Advanced
smartchainarksmartchainark
9

skill-security-audit

Scan installed Claude Code and OpenClaw skills for malicious patterns.

Community
Intermediate