ClawSec 安全技能合集
检查助手运行时安全、验证签名通告并发现配置漂移。
Prompt Security 公开包覆盖 OpenClaw、NanoClaw、Hermes 和 Picoclaw，提供通告、审查、完整性、安装检查、事件报告和发布流程。
适用场景
- 审查助手环境与安全通告
- 验证产物并跟踪配置漂移
使用方法
按运行时选择包并遵循上游设置，可选持久保护需单独启用。功能矩阵说明当前流量防护包提供规格，尚未提供运行时代理。
Skills
claw-release
Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.
prompt-security/clawsecclawsec-clawhub-checker
ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.
prompt-security/clawsecclawsec-feed
Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.
prompt-security/clawsecclawsec-nanoclaw
Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot
prompt-security/clawsecclawsec-scanner
Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.
prompt-security/clawsecclawsec-suite
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
prompt-security/clawsecclawtributor
Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.
prompt-security/clawsechermes-attestation-guardian
Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.
prompt-security/clawsechermes-traffic-guardian
Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.
prompt-security/clawsecnanoclaw-traffic-guardian
NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.
prompt-security/clawsecopenclaw-audit-watchdog
Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.
prompt-security/clawsecopenclaw-traffic-guardian
OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review.
prompt-security/clawsecpicoclaw-security-guardian
Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.
prompt-security/clawsecpicoclaw-self-pen-testing
Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.
prompt-security/clawsecpicoclaw-traffic-guardian
Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.
prompt-security/clawsecsoul-guardian
Drift detection + baseline integrity guard for agent workspace files with automatic alerting support
prompt-security/clawsec