ClawSec Security Skills
Inspect agent-runtime security, verify signed advisories, and detect configuration drift.
Prompt Security’s public package family covers OpenClaw, NanoClaw, Hermes, and Picoclaw, with advisory, audit, integrity, guarded-install, incident-reporting, and release workflows.
Use cases
- Audit an agent environment and check advisory intelligence
- Verify artifacts and track configuration drift
How to use
Choose the package for the runtime and follow its upstream setup. Optional persistent protections have separate activation steps; consult the feature matrix because traffic-guardian packages currently provide specifications rather than runtime proxies.
Skills
claw-release
Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.
prompt-security/clawsecclawsec-clawhub-checker
ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.
prompt-security/clawsecclawsec-feed
Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.
prompt-security/clawsecclawsec-nanoclaw
Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot
prompt-security/clawsecclawsec-scanner
Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.
prompt-security/clawsecclawsec-suite
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
prompt-security/clawsecclawtributor
Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.
prompt-security/clawsechermes-attestation-guardian
Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.
prompt-security/clawsechermes-traffic-guardian
Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.
prompt-security/clawsecnanoclaw-traffic-guardian
NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.
prompt-security/clawsecopenclaw-audit-watchdog
Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.
prompt-security/clawsecopenclaw-traffic-guardian
OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review.
prompt-security/clawsecpicoclaw-security-guardian
Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.
prompt-security/clawsecpicoclaw-self-pen-testing
Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.
prompt-security/clawsecpicoclaw-traffic-guardian
Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.
prompt-security/clawsecsoul-guardian
Drift detection + baseline integrity guard for agent workspace files with automatic alerting support
prompt-security/clawsec