Updated 7mo ago
by UseAI-pro
openclaw-skills-security
Curated, security-first OpenClaw skills (Markdown-based). Security audit skills - detect prompt injection, supply chain attacks, credential leaks. Works with Codex CLI, Claude Code, any LLM.
73 GitHub stars (73)
+1 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | 0 |
| Sep 29 | 0 |
| Sep 30 | 0 |
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | −1 |
| Oct 14 | +1 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 13 skills (13 skills found in its SKILL.md files)
- 10 forks (10 forks)
- 7mo ago last update (Last updated 7mo ago)
Install
Skills CLI
npx skills add UseAI-pro/openclaw-skills-security
Asks which skills and agents to install. Just one: npx skills add UseAI-pro/openclaw-skills-security --skill config-hardener — add -g for every project.
Claude Code
git clone https://github.com/UseAI-pro/openclaw-skills-securitycp -r "openclaw-skills-security/skills/config-hardener" ~/.claude/skills/
Copies the config-hardener skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add UseAI-pro/openclaw-skills-security
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
config-hardener
Audit and harden your OpenClaw configuration. Checks AGENTS.md, gateway settings, sandbox config, and permission policies for security weaknesses.
skills/config-hardener/SKILL.md on GitHub (opens in a new tab) -
credential-scanner
Scan your project for exposed credentials, API keys, and secrets before running OpenClaw skills. Prevents accidental exfiltration.
skills/credential-scanner/SKILL.md on GitHub (opens in a new tab) -
dependency-auditor
Audit npm, pip, and Go dependencies that OpenClaw skills try to install. Checks for known vulnerabilities, typosquatting, and malicious packages.
skills/dependency-auditor/SKILL.md on GitHub (opens in a new tab) -
incident-responder
Step-by-step incident response for OpenClaw security breaches. Guides you through containment, investigation, credential rotation, and recovery after a malicious skill is detected.
skills/incident-responder/SKILL.md on GitHub (opens in a new tab) -
network-watcher
Audit and monitor network requests made by OpenClaw skills. Detects data exfiltration, unauthorized API calls, and suspicious outbound connections.
skills/network-watcher/SKILL.md on GitHub (opens in a new tab) -
output-sanitizer
Sanitize OpenClaw agent output before display. Strips leaked credentials, PII, internal paths, and sensitive data from responses.
skills/output-sanitizer/SKILL.md on GitHub (opens in a new tab) -
permission-auditor
Analyze OpenClaw skill permissions and explain exactly what each permission allows. Identifies over-privileged skills and suggests minimal permission sets.
skills/permission-auditor/SKILL.md on GitHub (opens in a new tab) -
prompt-guard
Detect and neutralize prompt injection attacks in OpenClaw skill content, user inputs, and external data sources. Prevents instruction hijacking and context manipulation.
skills/prompt-guard/SKILL.md on GitHub (opens in a new tab) -
sandbox-guard
Generate Docker sandbox configurations for safely running untrusted OpenClaw skills. Isolates filesystem, network, and process access.
skills/sandbox-guard/SKILL.md on GitHub (opens in a new tab) -
setup-auditor
Audit your OpenClaw environment for credential leaks, unsafe defaults, and missing sandbox configuration. Wizard-style: answers questions about your setup and produces a fix checklist.
skills/setup-auditor/SKILL.md on GitHub (opens in a new tab) -
skill-auditor
Comprehensive security auditor for OpenClaw skills. Checks for typosquatting, dangerous permissions, prompt injection, supply chain risks, and data exfiltration patterns — before you install anything.
skills/skill-auditor/SKILL.md on GitHub (opens in a new tab) -
skill-guard
Runtime security monitor for active OpenClaw skills. Watches file access, network calls, and shell commands. Flags anomalous behavior and enforces permission boundaries.
skills/skill-guard/SKILL.md on GitHub (opens in a new tab) -
skill-vetter
Security-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
skills/skill-vetter/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
SkillSpectorby NVIDIA Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…
-
claude-code-ultimate-guideby FlorianBruniaux The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lin…
-
Claude-BugHunterby elementalsouls A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated…
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.