Updated 1d ago
by prompt-security
clawsec
A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.
1.1k GitHub stars (1,121)
+13 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | +1 |
| Sep 29 | +1 |
| Sep 30 | +2 |
| Oct 1 | −1 |
| Oct 2 | −1 |
| Oct 3 | −2 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | +1 |
| Oct 7 | 0 |
| Oct 8 | +3 |
| Oct 9 | +4 |
| Oct 10 | 0 |
| Oct 11 | +1 |
| Oct 12 | 0 |
| Oct 13 | +1 |
| Oct 14 | +2 |
| Oct 15 | +1 |
| Oct 16 | 0 |
- 16 skills (16 skills found in its SKILL.md files)
- 111 forks (111 forks)
- 1d ago last update (Last updated 1d ago)
Install
Skills CLI
npx skills add prompt-security/clawsec
Asks which skills and agents to install. Just one: npx skills add prompt-security/clawsec --skill claw-release — add -g for every project.
Claude Code
git clone https://github.com/prompt-security/clawseccp -r "clawsec/skills/claw-release" ~/.claude/skills/
Copies the claw-release skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add prompt-security/clawsec
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
claw-release
Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.
skills/claw-release/SKILL.md on GitHub (opens in a new tab) -
clawsec-clawhub-checker
ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.
skills/clawsec-clawhub-checker/SKILL.md on GitHub (opens in a new tab) -
clawsec-feed
Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.
skills/clawsec-feed/SKILL.md on GitHub (opens in a new tab) -
clawsec-nanoclaw
Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot
skills/clawsec-nanoclaw/SKILL.md on GitHub (opens in a new tab) -
clawsec-scanner
Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.
skills/clawsec-scanner/SKILL.md on GitHub (opens in a new tab) -
clawsec-suite
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
skills/clawsec-suite/SKILL.md on GitHub (opens in a new tab) -
clawtributor
Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.
skills/clawtributor/SKILL.md on GitHub (opens in a new tab) -
hermes-attestation-guardian
Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.
skills/hermes-attestation-guardian/SKILL.md on GitHub (opens in a new tab) -
hermes-traffic-guardian
Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.
skills/hermes-traffic-guardian/SKILL.md on GitHub (opens in a new tab) -
nanoclaw-traffic-guardian
NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.
skills/nanoclaw-traffic-guardian/SKILL.md on GitHub (opens in a new tab) -
openclaw-audit-watchdog
Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.
skills/openclaw-audit-watchdog/SKILL.md on GitHub (opens in a new tab) -
openclaw-traffic-guardian
OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review.
skills/openclaw-traffic-guardian/SKILL.md on GitHub (opens in a new tab) -
picoclaw-security-guardian
Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.
skills/picoclaw-security-guardian/SKILL.md on GitHub (opens in a new tab) -
picoclaw-self-pen-testing
Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.
skills/picoclaw-self-pen-testing/SKILL.md on GitHub (opens in a new tab) -
picoclaw-traffic-guardian
Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.
skills/picoclaw-traffic-guardian/SKILL.md on GitHub (opens in a new tab) -
soul-guardian
Drift detection + baseline integrity guard for agent workspace files with automatic alerting support
skills/soul-guardian/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.