← 返回 Skills 市场
12670
总下载
8
收藏
0
当前安装
24
版本数
在 OpenClaw 中安装
/install clawsec-suite
功能描述
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup...
安全使用建议
Review before installing. Prefer the manual verified install path or a pinned clawhub version, keep CLAWSEC_ALLOW_UNSIGNED_FEED disabled, avoid custom feed/catalog URLs unless you control and verify them, and only enable the persistent hook or cron if you want ongoing security automation in your OpenClaw main session.
能力评估
Credentials
Reading installed skill names/versions, writing a local state file, and fetching advisory data are proportionate for this security purpose. I did not find artifact-backed credential collection or exfiltration; scanner hits in feed.json are vulnerability descriptions.
Install Mechanism
The recommended and guarded install paths use npx clawhub@latest, so installer behavior can change after review. The manual install path includes checksum/signature verification, which is safer.
Instruction Scope
The main hook verifies signed feeds, but HEARTBEAT.md fetches the advisory feed with curl, validates only JSON shape, and prints remote title/action text as operational security guidance. The catalog discovery script also accepts a remote catalog URL without signature or hostname restrictions and prints install commands from that data.
Persistence & Privilege
Setup can install a persistent global OpenClaw hook and optionally create an unattended main-session cron job. This is disclosed and preflighted, and the hook only posts alerts, but it is still high-impact agent automation that users should review before enabling.
Purpose & Capability
The stated purpose matches the artifacts: advisory monitoring, installed-skill matching, guarded installs, hook setup, optional cron setup, and local advisory state tracking are all disclosed and security-related.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install clawsec-suite - 安装完成后，直接呼叫该 Skill 的名称或使用
/clawsec-suite触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.16
Release 0.1.16 via CI
v0.1.14
Release 0.1.14 via CI
v0.1.13
Release 0.1.13 via CI
v0.1.12
Release 0.1.12 via CI
v0.1.10
Release 0.1.10 via CI
v0.1.9
Release 0.1.9 via CI
v0.1.8
Release 0.1.8 via CI
v0.1.7
Release 0.1.7 via CI
v0.1.6
Release 0.1.6 via CI
v0.1.5
Release 0.1.5 via CI
v0.1.4
Release 0.1.4 via CI
v0.1.3
Release 0.1.3 via CI
v0.1.2
Release 0.1.2 via CI
v0.1.1
Release 0.1.1 via CI
v0.1.0
Release 0.1.0 via CI
v0.0.10
Release 0.0.10 via CI
v0.0.9
Release 0.0.9 via CI
v0.0.8
Release 0.0.8 via CI
v0.0.6
Release 0.0.6 via CI
v0.0.5
Release 0.0.5 via CI
元数据
常见问题
clawsec-suite 是什么？
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 12670 次。
如何安装 clawsec-suite？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawsec-suite」即可一键安装，无需额外配置。
clawsec-suite 是免费的吗？
是的，clawsec-suite 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
clawsec-suite 支持哪些平台？
clawsec-suite 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 clawsec-suite？
由 davida-ps（@davida-ps）开发并维护，当前版本 v0.1.16。
推荐 Skills