Updated 2d ago
by gl0di
clawseccheck
🦞 Local, read-only security audit for your OpenClaw agent. Finds config, prompt-injection and supply-chain risks, watches for drift, and vets a skill before you install it. Offline, zero deps. A–F grade when all five layers ran.
58 GitHub stars (58)
Steady at 58 stars — no new stars in the 36 days since Sep 30.
- 18 skills (18 skills found in its SKILL.md files)
- 13 forks (13 forks)
- 2d ago last update (Last updated 2d ago)
Install
Skills CLI
npx skills add gl0di/clawseccheck
Asks which skills and agents to install. Just one: npx skills add gl0di/clawseccheck --skill clawseccheck — add -g for every project.
Claude Code
git clone https://github.com/gl0di/clawseccheckcp -r "clawseccheck" ~/.claude/skills/clawseccheck
Copies the clawseccheck skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add gl0di/clawseccheck
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 18 of 362 files.
-
clawseccheck
Free, local, read-only security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, logs, agent session logs, and installed skills, plus a bounded host-security scan. It changes no OpenClaw config, skill or bootstrap file; its own history and state stay under ~/.clawseccheck (--no-history skips it, --purge removes it). Grades your setup A-F when all five check lay…
SKILL.md on GitHub (opens in a new tab) -
bad-b42-gyp-inline-action
Formats text for reports
fixtures/bad_b42_gyp_inline_action/ on GitHub (opens in a new tab)SKILL.md -
clean-b42-gyp-native-action
Formats text for reports
fixtures/clean_b42_gyp_native_action/ on GitHub (opens in a new tab)SKILL.md -
warn-b42-gyp-nonliteral
Formats text for reports
fixtures/warn_b42_gyp_nonliteral/ on GitHub (opens in a new tab)SKILL.md -
site-builder
Build, lint, and preview the static site; explain build failures.
fixtures/b334_nearmiss_documented_helper/ on GitHub (opens in a new tab)skills/ site-builder/ SKILL.md -
quick-tool
A quick productivity tool whose Setup section fetches an installer from a bare public-IP host, with no paste-into-terminal imperative wording (SC-001 IP corroborator).
fixtures/bad_b100_clickfix_ip_fetch/ on GitHub (opens in a new tab)skills/ quick-tool/ SKILL.md -
split-skill
Ships two data files whose base64 content only decodes to a shell/download payload when joined across their file boundary.
fixtures/bad_b102_boundary_payload/ on GitHub (opens in a new tab)skills/ split-skill/ SKILL.md -
mediatool
A small media processing helper for local files.
fixtures/bad_b103_ftp/ on GitHub (opens in a new tab)skills/ mediatool/ SKILL.md -
dupe
a helper.
fixtures/bad_b104_offboarding/ on GitHub (opens in a new tab)skills/ dupe-v1/ SKILL.md -
solo
a helper.
fixtures/bad_b104_offboarding/ on GitHub (opens in a new tab)skills/ solo/ SKILL.md -
report-builder
Assembles the weekly account report from local usage data.
fixtures/bad_b105_cross_skill_combined/ on GitHub (opens in a new tab)skills/ report-builder/ SKILL.md -
style-guide
House writing-style conventions for agent responses.
fixtures/bad_b105_cross_skill_combined/ on GitHub (opens in a new tab)skills/ style-guide/ SKILL.md -
meeting-notes
Summarise meeting notes into actions.
fixtures/bad_b13_ast05_blockquote/ on GitHub (opens in a new tab)skills/ meeting-notes/ SKILL.md -
style-helper
Apply the house writing style to drafts.
fixtures/bad_b13_ast05_bullet/ on GitHub (opens in a new tab)skills/ style-helper/ SKILL.md -
research-brief
Prepare a research brief for the user.
fixtures/bad_b13_ast05_list_item/ on GitHub (opens in a new tab)skills/ research-brief/ SKILL.md -
ticket-triage
Triage inbound support tickets.
fixtures/bad_b13_ast05_sentence_split/ on GitHub (opens in a new tab)skills/ ticket-triage/ SKILL.md -
table-runner
Helper skill.
fixtures/bad_b13_ast05_table/ on GitHub (opens in a new tab)skills/ table-runner/ SKILL.md -
retrieval-helper
Helper skill.
fixtures/bad_b13_ast05_table_cell_split/ on GitHub (opens in a new tab)skills/ retrieval-helper/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
hol-guardby hashgraph-online Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plug…
-
skillshareby runkids 📚 Sync skills, agents, MCP, plugins to all AI CLI tools with one command and simplify team sharing.
-
OpenContextby 0xranx A personal context store for AI agents and assistants—reuse your existing coding agent CLI (Codex/Claude/OpenCode) with built‑in Skills/too…
-
-
agnixby agent-sh The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plugin for all major IDEs include…
-
opencode-primerby wesammustafa Master OpenCode, the open-source AI coding agent — setup, agents, skills, plugins, MCP, Zen & headless CI.