ClawSec skill
Security skills for OpenClaw, NanoClaw, Hermes and Picoclaw: signed advisories, guarded installs and drift detection
- 1,127 ★ on the repository
- Last commit
- AGPL-3.0
Broad access
Why this level
- Changes persistent agent config and adds hooks
- Runs scripts and can set up scheduled jobs
- The self pen-testing package runs offensive checks
Install
- Works in
Manual install
npx skills add prompt-security/clawsec --skill clawsec-suite -a openclaw --global -yFor OpenClaw. The advisory hook is enabled separately via setup_advisory_hook.mjs after reviewing its preflight.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Changes persistent agent config and adds hooks
- Runs scripts and can set up scheduled jobs
- The self pen-testing package runs offensive checks
This is third-party code. Review the repository files before installing.
What it does
ClawSec by Prompt Security protects Claw-family autonomous agent runtimes. The core clawsec-suite verifies a signed advisory feed of NVD CVEs and approved community reports and matches it against installed skills. Installing a skill with a known issue stops and requires a second confirmation. Separate packages watch critical agent files such as SOUL.md for drift, audit configuration, produce attestations and verify release signatures. Picoclaw also gets an opt-in self pen-testing package.
Who it is for. For operators running OpenClaw, Hermes, NanoClaw or Picoclaw who are responsible for their security.
Good fit when
- The agent installs skills from catalogs and you need pre-install checks
- You need to notice changes to the agent's identity or config files
- You need regular audits of the agent environment
Not a fit when
- You use Claude Code, Cursor or Codex without Claw platforms
- You need a network proxy: traffic-guardian packages are only specifications for now
Example request
Check installed skills against the ClawSec advisory feed and show everything high or criticalLimitations
Works only with OpenClaw, NanoClaw, Hermes and Picoclaw. The AGPL-3.0 license has obligations when distributing changes. The advisory hook changes persistent OpenClaw config and needs a gateway restart. Some workflows need WSL or Git Bash on Windows.
How to disable. Disable the advisory hook in OpenClaw config, delete clawsec-suite from ~/.openclaw/skills and restart the gateway.
FAQ
Does ClawSec remove skills by itself?
No, it recommends and gates risky actions; removal and overrides stay under human approval.
Where do advisories come from?
From NVD CVEs, approved community reports and provisional GitHub advisories. The feed and checksums are signed.
Discussion
No questions or reviews yet.
Related
SkillsAgentShield audits the .claude folder for plaintext keys, broad permissions, dangerous hooks and risky MCP servers and grades the setup from A to F
VibeSec
VibeSec-Skill
A secure coding skill: the agent looks at code from a bug hunter's perspective and prevents common web vulnerabilities
Security scanner for agent skills and MCP servers: finds prompt injection, data exfiltration and supply chain risks before install
A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install
A CLI agent for authorized pentesting: from a natural-language brief it runs recon, finds and verifies vulnerabilities and prepares a report
A code security audit skill by Cloudflare: the agent runs recon, coverage-led hunting and independent verification of findings, then produces a structured repor
README in short
The README describes installing the OpenClaw suite in two separate steps: adding the package and enabling the hook after reviewing its preflight. It shows a drift detection demo, protection layers and entry points for each platform. It documents the signed advisory feed and how to query it with curl. AGPL-3.0 licensed.