clawsec

Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.

ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.

Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.

Picoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.

ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.

Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot

Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.

Harness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.

Hermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.

NanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.

Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.

OpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review.

Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.

Picoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.

Drift detection + baseline integrity guard for agent workspace files with automatic alerting support

Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.