← Back to Skills Marketplace
12670
Downloads
8
Stars
0
Active Installs
24
Versions
Install in OpenClaw
/install clawsec-suite
Description
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup...
Usage Guidance
Review before installing. Prefer the manual verified install path or a pinned clawhub version, keep CLAWSEC_ALLOW_UNSIGNED_FEED disabled, avoid custom feed/catalog URLs unless you control and verify them, and only enable the persistent hook or cron if you want ongoing security automation in your OpenClaw main session.
Capability Assessment
Credentials
Reading installed skill names/versions, writing a local state file, and fetching advisory data are proportionate for this security purpose. I did not find artifact-backed credential collection or exfiltration; scanner hits in feed.json are vulnerability descriptions.
Install Mechanism
The recommended and guarded install paths use npx clawhub@latest, so installer behavior can change after review. The manual install path includes checksum/signature verification, which is safer.
Instruction Scope
The main hook verifies signed feeds, but HEARTBEAT.md fetches the advisory feed with curl, validates only JSON shape, and prints remote title/action text as operational security guidance. The catalog discovery script also accepts a remote catalog URL without signature or hostname restrictions and prints install commands from that data.
Persistence & Privilege
Setup can install a persistent global OpenClaw hook and optionally create an unattended main-session cron job. This is disclosed and preflighted, and the hook only posts alerts, but it is still high-impact agent automation that users should review before enabling.
Purpose & Capability
The stated purpose matches the artifacts: advisory monitoring, installed-skill matching, guarded installs, hook setup, optional cron setup, and local advisory state tracking are all disclosed and security-related.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install clawsec-suite - After installation, invoke the skill by name or use
/clawsec-suite - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.16
Release 0.1.16 via CI
v0.1.14
Release 0.1.14 via CI
v0.1.13
Release 0.1.13 via CI
v0.1.12
Release 0.1.12 via CI
v0.1.10
Release 0.1.10 via CI
v0.1.9
Release 0.1.9 via CI
v0.1.8
Release 0.1.8 via CI
v0.1.7
Release 0.1.7 via CI
v0.1.6
Release 0.1.6 via CI
v0.1.5
Release 0.1.5 via CI
v0.1.4
Release 0.1.4 via CI
v0.1.3
Release 0.1.3 via CI
v0.1.2
Release 0.1.2 via CI
v0.1.1
Release 0.1.1 via CI
v0.1.0
Release 0.1.0 via CI
v0.0.10
Release 0.0.10 via CI
v0.0.9
Release 0.0.9 via CI
v0.0.8
Release 0.0.8 via CI
v0.0.6
Release 0.0.6 via CI
v0.0.5
Release 0.0.5 via CI
Metadata
Frequently Asked Questions
What is clawsec-suite?
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup... It is an AI Agent Skill for Claude Code / OpenClaw, with 12670 downloads so far.
How do I install clawsec-suite?
Run "/install clawsec-suite" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is clawsec-suite free?
Yes, clawsec-suite is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does clawsec-suite support?
clawsec-suite is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created clawsec-suite?
It is built and maintained by davida-ps (@davida-ps); the current version is v0.1.16.
More Skills