prompt-security/clawsec

Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.

ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.

Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.

Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot

Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific DAST hook execution testing for OpenClaw hooks.

ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.

Community incident reporting for AI agents. Contribute to collective security by reporting threats.

Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.

Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.

NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.

Optional email copy destination.

OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, and inbound injection detection.

Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.

Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.

Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.

Drift detection + baseline integrity guard for agent workspace files with automatic alerting support