⚡ ClawSec

Security verification for ClawHub skills. Scan any skill -- by ClawHub slug or local path -- against 9 continuously-updated threat intelligence sources using 7 autonomous security checks.

When to use

Use ClawSec before installing a skill from ClawHub to verify it is safe. Also use it when developing your own skills -- scan before publishing to catch issues early.

Quick start

clawsec scan weather-forecast        # Scan by ClawHub slug (downloads, scans, cleans up)
clawsec scan ./my-skill              # Scan a local skill directory
clawsec scan ./my-skill --checks dep-scan,secret-scan   # Run specific checks only
clawsec scan ./my-skill --json       # JSON output for programmatic use

First run sets up a Python venv and syncs threat intel automatically. After that, clawsec scan works with zero configuration.

Parameters

When an agent invokes this skill through OpenClaw:

• target (required) -- Local directory path or ClawHub skill slug (e.g. weather-forecast). If a slug is given, the skill is downloaded to a sandboxed temp directory, scanned, and removed.
• checks (optional) -- Comma-separated list: dep-scan, static-analysis, secret-scan, yara-scan, ioc-match, behavioral, prompt-inject. Default: all 7.
• json (optional) -- Output results as JSON for programmatic use.

Output

ClawSec returns a structured report with:

• verdict -- pass, warn, or fail
• findings -- Array of issues, each with severity (critical, high, medium), description, and file location
• report_id -- Full UUID for later retrieval via clawsec report \x3Cid>

Exit codes: 0 = pass, 1 = warn, 2 = fail

Checks

Threat intel sources (9)

CISA KEV, OSV (npm + PyPI), EPSS, MalwareBazaar, URLhaus, ThreatFox, Feodo Tracker, YARA Rules, Semgrep Rules

Run clawsec sync to refresh the intel cache. First clawsec scan auto-syncs if no cache exists.

Security and Privacy

• No data leaves your machine. All scanning is local. No telemetry, no phone-home, no analytics.
• Slug scans are sandboxed. Downloaded skills go to a 0700 temp directory with execute bits stripped and npm scripts suppressed. Cleaned up after scanning.
• During scan, zero network requests. All intel is read from the local cache.
• During sync, only public threat intel feeds are contacted. No skill code or scan targets are ever transmitted externally.

Local files

• Read: ~/.clawsec/intel/ (threat intel cache), skill directory passed as target
• Written: ~/.clawsec/intel/, ~/.clawsec/reports/, ~/.clawsec/venv/, ~/.clawsec/clawsec.log
• First clawsec sync (or auto-sync) downloads approximately 50–100 MB of threat intel data

Install

npm install -g @lowwattlabs/clawsec

Or let OpenClaw install it via the skill install spec above.

License

MIT-0