Run OpenClaw security audits on code changes before PR submission.
npx skills add https://github.com/pkuppens/pkuppens --skill openclaw-security-pkuppens
Please help me install this Agent Skill. Skill: openclaw-security Source: https://github.com/pkuppens/pkuppens/tree/main/skills/openclaw-security Command: npx skills add https://github.com/pkuppens/pkuppens --skill openclaw-security-pkuppens
Enforces OpenClaw security constraints and mandates security audit before every code-change PR. Use when working on OpenClaw projects, before opening a PR, or when configuring or hardening OpenClaw.
Before opening a PR, run openclaw security audit --deep and openclaw security audit --fix until both complete successfully.
High-intent search queries and answers about installing and using this skill.
A mandatory security audit for a pull request validates your code's security posture by running repeatable audit commands that must pass before merging. It enforces security hygiene by checking code changes against OpenClaw security constraints.
You enforce a mandatory security audit on every code-change PR by integrating this Skill into your pull request workflow. It runs OpenClaw security audits on code changes and requires explicit, repeatable audit commands to pass before merging.
To remediate security audit failures, follow the provided remediation guidance to fix identified issues, then re-run the openclaw security audit commands until they complete successfully before opening your pull request.
Yes, the security audit applies to PR workflows, deployment configurations, and tool integrations across OpenClaw projects. It validates security posture across all these components before merging code changes.
Yes, the security audit integrates with quality gates and governance skills to ensure audits are completed prior to integration. It aligns with other skills to enforce security constraints before a pull request is merged.
You should not rely solely on automated fixes when the audit --fix command cannot resolve complex compliance or governance issues. In such cases, manual remediation is required, and you must re-run the deep audit until it passes.
OpenCovenAutomate the review-prepare-merge process in OpenClaw with security checks and issue classification.
s3nex-comCoordinate pull request lifecycle from review through merge with mandatory gates.
nelohenriqApply security-first review checklists to pull requests and provide actionable feedback.
nazrulsoftwaredevAutomate Spring Boot verification with build execution, static analysis, and security scanning.
