rea
Reverse engineer anything with agents, from app behavior down to native binaries.
420k
@morlutoSecurity
Plugin
clawsec
A security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents. It provides drift detection to protect key files like SOUL.md, live security advisories, automated audits, and skill integrity checks.
Plugin Signal82/100Strong
maintained100
capable59
documented100
adopted65
Claude Code
$ npx -y skills add prompt-security/clawsec --agent claude-code
Codex
$ npx skills add prompt-security/clawsec -a codex
Cursor
$ npx skills add prompt-security/clawsec -a cursor
Gemini CLI
$ npx skills add prompt-security/clawsec -a gemini-cli
GitHub Copilot
$ npx skills add prompt-security/clawsec -a github-copilot
OpenCode
$ npx skills add prompt-security/clawsec -a opencode
Windsurf
$ npx skills add prompt-security/clawsec -a windsurf
Stats
1,135
Stars
110
Forks
Active
Maintenance
JavaScript
Language
AGPL-3.0
License
Last commit
Created
In this plugin
- claw-release
- clawsec-clawhub-checker
- clawsec-feed
- clawsec-nanoclaw
- clawsec-scanner
- clawsec-suite
- clawtributor
- hermes-attestation-guardian
- hermes-traffic-guardian
- nanoclaw-traffic-guardian
- openclaw-audit-watchdog
- openclaw-traffic-guardian
- picoclaw-security-guardian
- picoclaw-self-pen-testing
- picoclaw-traffic-guardian
- soul-guardian
What's inside
16 Skills
/claw-releaseRelease automation for Claw skills and website. Guides through version bumping, tagging, and release verification./clawsec-clawhub-checkerClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation./clawsec-feedSecurity advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator./clawsec-nanoclawUse when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot/clawsec-scannerAutomated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks./clawsec-suiteClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
Links
Badges
README
Website · Skill catalog · Security feed · Documentation · Releases
ClawSec is an AGPL collection of security skills and signed advisory intelligence for AI agent runtimes. It helps operators verify skill artifacts, detect configuration drift, audit agent environments, and approval-gate risky installs across OpenClaw, NanoClaw, Hermes, and Picoclaw.
Install the OpenClaw suite
The OpenClaw entry point is clawsec-suite. Adding the package and activating its persistent hook are separate, reviewable steps.
1. Add the suite
npx skills add prompt-security/clawsec --skill clawsec-suite -a openclaw --global -y
This installs the suite with its signed advisory trust set, heartbeat workflow, guarded installer, and setup scripts. Optional protections remain separate packages that the suite discovers from the published catalog.
2. Review and enable the advisory hook
SUITE_DIR="${INSTALL_ROOT:-$HOME/.openclaw/skills}/clawsec-suite"
node "$SUITE_DIR/scripts/setup_advisory_hook.mjs"
The setup script prints its preflight before it changes persistent OpenClaw configuration. After it succeeds, restart the OpenClaw gateway and run /new once to trigger the first advisory scan.
To see the current optional protections:
node "$SUITE_DIR/scripts/discover_skill_catalog.mjs"
Installing for someone else? Ask their agent to install
clawsec-suitewith the command above, show the hook preflight, and wait for approval before enabling the hook or optional cron job.
Shell and path notes
For bash and zsh, keep home variables expandable:
export INSTALL_ROOT="$HOME/.openclaw/skills"
Do not single-quote paths that contain $HOME. In PowerShell, build the path explicitly:
$env:INSTALL_ROOT = Join-Path $HOME ".openclaw\skills"
node "$env:INSTALL_ROOT\clawsec-suite\scripts\setup_advisory_hook.mjs"
POSIX .sh workflows require WSL or Git Bash on Windows.
See it work
Detect and respond to agent-file drift
The soul-guardian demo changes a protected agent file, detects the mismatch, and walks through the response.
Watch the MP4 with audio →
Watch the suite installation walkthrough
How ClawSec protects an agent
| Protection layer | What it does |
|---|---|
| Signed intelligence | Verifies the advisory feed and checksum manifest before matching published risk against installed skills. |
| Guarded installs | Stops on advisory matches and requires a second, explicit confirmation before a risky install can continue. |
| Integrity and drift | Gives platform-specific skills baselines for critical files, configuration, attestations, and release artifacts. |
| Audits and reporting | Provides focused audit, posture, self-test, and community-reporting packages where the platform contract supports them. |
ClawSec recommends and gates actions; destructive removal and install overrides remain approval-controlled.
Platform entry points
- OpenClaw — start with
clawsec-suitefor signed advisory monitoring and guarded installs, then discover separate drift and audit protections. - NanoClaw — use
clawsec-nanoclawfor NanoClaw-specific advisory, integrity, verification, and security-tool workflows. - Hermes — use
hermes-attestation-guardianfor signed advisory checks, guarded verification, deterministic attestations, and baseline drift detection. - Picoclaw — use
picoclaw-security-guardianfor posture, advisory, drift, and release-artifact checks. Self-pen testing is a separate opt-in package.
The
*-traffic-guardiandirectories are specification baselines for platform builders. They are not shipped runtime proxies today.
Browse every package in the live skill catalog or the repository’s skills/ directory.
Skill feature matrix
The full package comparison is preserved in the wiki, including shipped, limited, and specification-only coverage.
Compare every skill in the feature matrix →
Query the signed advisory channel
The consolidated feed can contain relevant NVD CVEs, approved community reports, and provisional GitHub advisories that do not yet have CVE identifiers.
curl -fsSL https://clawsec.prompt.security/advisories/feed.json \
| jq '.advisories[] | select(.severity == "critical" or .severity == "high")'
Trust material lives beside the feed:
The legacy /releases/latest/download/feed.json endpoint remains a compatibility mirror. New consumers should use the canonical /advisories/feed.json endpoint.
Build, test, and contribute
Run the web catalog locally:
npm install
npm run dev
Run the repository’s local quality gate before pushing:
./scripts/prepare-to-push.sh
Validate a skill package directly:
python utils/validate_skill.py skills/clawsec-feed
Start with these references:
The source of truth for project documentation is wiki/. GitHub Wiki pages and LLM-ready exports are generated from those files.
Translations
English · Deutsch · Español · Français · 日本語 · 한국어
Localized wiki indexes: DE · ES · FR · JA · KO · EN
License
ClawSec source code is licensed under GNU AGPL-3.0-or-later. See LICENSE. Files under font/ have separate license terms and are not used by the README artwork.
ClawSec · Prompt Security, from SentinelOne Verify before your agent trusts.
Stars on GitHub
Momentum
- stars in total
- 1.1k
File tree
Similar plugins.
@morlutoreverse-skill
A skill pack for authorized reverse engineering, security research, and penetration testing that routes tasks to the right skill and sets up needed tools on demand. It covers API security assessment and Android APK analysis, among others.
46 skills44k
@zhaoxuya520cybersecurity-skills
Gives an AI agent the step-by-step workflow a senior security analyst follows, covering when to use each technique, what to check first, how to run it and how to verify the result. Covers incident response, forensics, threat intelligence, malware analysis, penetration testing and red teaming.
200 skills36k
@mukul975watermarks-remover
Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files, for privacy and hygiene on content you own. The skill is a thin client: it drives the machinery over HTTP, so the agent host needs no Python.
2 skills1 hook26k
@guillaumemeyerQuestions about clawsec.
Install it with the command on its page. It includes claw-release, clawsec-clawhub-checker, clawsec-feed. Its skills do not fire on their own yet. Free and open source.
- What is clawsec?
- prompt-security/clawsec is a security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents, covering skills and agents. It adds drift detection, security advisories, automated audits and skill integrity checks, and suits anyone who wants to harden an agent before installing new skills.
- How do I install clawsec?
- Run these in Claude Code: npx -y skills add prompt-security/clawsec --agent claude-code. Then prompt normally.
- Does clawsec auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin.
- Is clawsec free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
- Which coding agents can use clawsec's skills?
- clawsec installs in Claude Code, and its skills also install in Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI. Each skill's page has the install command. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it