Updated today
by gl0di
clawseccheck
🦞 Local, read-only security audit for your OpenClaw agent. Finds config, prompt-injection and supply-chain risks, watches for drift, and vets a skill before you install it. Offline, zero deps. A–F grade when all five layers ran.
58 GitHub stars (58)
Steady at 58 stars — no new stars in the 16 days since Sep 30.
- 16 skills (16 skills found in its SKILL.md files)
- 13 forks (13 forks)
- Today last update (Last updated today)
Install
Skills CLI
npx skills add gl0di/clawseccheck
Asks which skills and agents to install. Just one: npx skills add gl0di/clawseccheck --skill clawseccheck — add -g for every project.
Claude Code
git clone https://github.com/gl0di/clawseccheckcp -r "clawseccheck" ~/.claude/skills/clawseccheck
Copies the clawseccheck skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add gl0di/clawseccheck
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 16 of 359 files.
-
clawseccheck
Free, local, read-only security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, logs, agent session logs, and installed skills, plus a bounded host-security scan; writes only its own local report/history (removable with --purge). Grades your setup A-F when all five check layers ran, naming what's missing otherwise. --monitor records a local baseline so every l…
SKILL.md on GitHub (opens in a new tab) -
site-builder
Build, lint, and preview the static site; explain build failures.
fixtures/b334_nearmiss_documented_helper/skills/site-builder/SKILL.md on GitHub (opens in a new tab) -
quick-tool
A quick productivity tool whose Setup section fetches an installer from a bare public-IP host, with no paste-into-terminal imperative wording (SC-001 IP corroborator).
fixtures/bad_b100_clickfix_ip_fetch/skills/quick-tool/SKILL.md on GitHub (opens in a new tab) -
split-skill
Ships two data files whose base64 content only decodes to a shell/download payload when joined across their file boundary.
fixtures/bad_b102_boundary_payload/skills/split-skill/SKILL.md on GitHub (opens in a new tab) -
mediatool
A small media processing helper for local files.
fixtures/bad_b103_ftp/skills/mediatool/SKILL.md on GitHub (opens in a new tab) -
dupe
a helper.
fixtures/bad_b104_offboarding/skills/dupe-v1/SKILL.md on GitHub (opens in a new tab) -
solo
a helper.
fixtures/bad_b104_offboarding/skills/solo/SKILL.md on GitHub (opens in a new tab) -
report-builder
Assembles the weekly account report from local usage data.
fixtures/bad_b105_cross_skill_combined/skills/report-builder/SKILL.md on GitHub (opens in a new tab) -
style-guide
House writing-style conventions for agent responses.
fixtures/bad_b105_cross_skill_combined/skills/style-guide/SKILL.md on GitHub (opens in a new tab) -
meeting-notes
Summarise meeting notes into actions.
fixtures/bad_b13_ast05_blockquote/skills/meeting-notes/SKILL.md on GitHub (opens in a new tab) -
style-helper
Apply the house writing style to drafts.
fixtures/bad_b13_ast05_bullet/skills/style-helper/SKILL.md on GitHub (opens in a new tab) -
research-brief
Prepare a research brief for the user.
fixtures/bad_b13_ast05_list_item/skills/research-brief/SKILL.md on GitHub (opens in a new tab) -
ticket-triage
Triage inbound support tickets.
fixtures/bad_b13_ast05_sentence_split/skills/ticket-triage/SKILL.md on GitHub (opens in a new tab) -
table-runner
Helper skill.
fixtures/bad_b13_ast05_table/skills/table-runner/SKILL.md on GitHub (opens in a new tab) -
retrieval-helper
Helper skill.
fixtures/bad_b13_ast05_table_cell_split/skills/retrieval-helper/SKILL.md on GitHub (opens in a new tab) -
code-reviewer
Review diffs against house rules.
fixtures/bad_b13_ast05_url_own_line/skills/code-reviewer/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
hol-guardby hashgraph-online Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skil…
-
skillshareby runkids 📚 Sync skills, agents, MCP, plugins to all AI CLI tools with one command and simplify team sharing.
-
OpenContextby 0xranx A personal context store for AI agents and assistants—reuse your existing coding agent CLI (Codex/Claude/OpenCode) with built‑in Skills/too…
-
-
agnixby agent-sh The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs include…
-
opencode-primerby wesammustafa Master OpenCode, the open-source AI coding agent — setup, agents, skills, plugins, MCP, Zen & headless CI.