ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
Fail-closed verification: Feed signatures are required by default. Checksum manifests are verified when companion checksum artifacts are available. Set CLAWSEC_ALLOW_UNSIGNED_FEED=1 only as a temporary migration bypass when adopting this version before signed feed artifacts are available upstream.
Use the suite heartbeat script as the single periodic security check entrypoint:
skills/clawsec-suite/HEARTBEAT.md
It handles:
suite update checks,
feed polling,
new-advisory detection,
affected-skill cross-referencing,
approval-gated response guidance for malicious/removal advisories,
and persistent state updates.
Approval-Gated Response Contract
If an advisory indicates a malicious or removal-recommended skill and that skill is installed:
Notify the user immediately with advisory details and severity.
Recommend removing or disabling the affected skill.
Treat the original install request as first intent only.
Ask for explicit second confirmation before deletion/disable action (or before proceeding with risky install).
Only proceed after that second confirmation.
The suite hook and heartbeat guidance are intentionally non-destructive by default.
Advisory Suppression / Allowlist
The advisory guardian pipeline supports opt-in suppression for advisories that have been reviewed and accepted by your security team. This is useful for first-party tooling or advisories that do not apply to your deployment.
Activation
Advisory suppression requires a single gate: the configuration file must contain "enabledFor" with "advisory" in the array. No CLI flag is needed -- the sentinel in the config file IS the opt-in gate.
If the enabledFor array is missing, empty, or does not include "advisory", all advisories are reported normally.
Config File Resolution (4-tier)
The advisory guardian resolves the suppression config using the same priority order as the audit pipeline:
Explicit --config <path> argument
OPENCLAW_AUDIT_CONFIG environment variable
~/.openclaw/security-audit.json
.clawsec/allowlist.json
Config Format
{"enabledFor":["advisory"],"suppressions":[{"checkId":"CVE-2026-25593","skill":"clawsec-suite","reason":"First-party security tooling — reviewed by security team","suppressedAt":"2026-02-15"},{"checkId":"CLAW-2026-0001","skill":"example-skill","reason":"Advisory does not apply to our deployment configuration","suppressedAt":"2026-02-16"}]}
Sentinel Semantics
"enabledFor": ["advisory"] -- only advisory suppression active
"enabledFor": ["audit"] -- only audit suppression active (no effect on advisory pipeline)
"enabledFor": ["audit", "advisory"] -- both pipelines honor suppressions
Missing or empty enabledFor -- no suppression active (safe default)
Matching Rules
checkId: exact match against the advisory ID (e.g., CVE-2026-25593 or CLAW-2026-0001)
skill: case-insensitive match against the affected skill name from the advisory
Both fields must match for an advisory to be suppressed
Required Fields per Suppression Entry
Field
Description
Example
checkId
Advisory ID to suppress
CVE-2026-25593
skill
Affected skill name
clawsec-suite
reason
Justification for audit trail (required)
First-party tooling, reviewed by security team
suppressedAt
ISO 8601 date (YYYY-MM-DD)
2026-02-15
Shared Config with Audit Pipeline
The advisory and audit pipelines share the same config file. Use the enabledFor array to control which pipelines honor the suppression list:
Audit entries (with check identifiers like skills.code_safety) are only matched by the audit pipeline. Advisory entries (with advisory IDs like CVE-2026-25593 or CLAW-2026-0001) are only matched by the advisory pipeline. Each pipeline filters for its own relevant entries.
Optional Skill Installation
Discover currently available installable skills dynamically, then install the ones you want:
SUITE_DIR="${INSTALL_ROOT:-$HOME/.openclaw/skills}/clawsec-suite"
node "$SUITE_DIR/scripts/discover_skill_catalog.mjs"# then install any discovered skill by name
npx clawhub@latest install <skill-name>
Machine-readable output is also available for automation:
