A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.
Install
npx skills add prompt-security/clawsecgh skill install prompt-security/clawsecgit clone --depth 1 https://github.com/prompt-security/clawsecSkills in this collection
- Claw ReleasePrompt SecurityRelease automation for Claw skills and website. Guides through version bumping, tagging, and release verification.
- Clawsec Clawhub CheckerPrompt SecurityClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.
- Clawsec FeedPrompt SecuritySecurity advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.
- Clawsec NanoclawPrompt SecurityUse when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot
- Clawsec ScannerPrompt SecurityAutomated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.
- Clawsec SuitePrompt SecurityClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
- ClawtributorPrompt SecurityHarness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.
- Hermes Attestation GuardianPrompt SecurityHermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.
- Hermes Traffic GuardianPrompt SecurityHermes runtime traffic monitoring baseline for opt-in proxy inspection, egress detection, and attestation-aware traffic posture.
- Nanoclaw Traffic GuardianPrompt SecurityNanoClaw runtime traffic monitoring baseline for host-side proxy inspection with container-safe MCP and IPC status surfaces.
- Openclaw Audit WatchdogPrompt SecurityAutomated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.
- Openclaw Traffic GuardianPrompt SecurityOpenClaw runtime traffic monitoring baseline for opt-in HTTP/HTTPS proxy inspection, egress detection, inbound injection detection, and social-account policy review.
- Picoclaw Security GuardianPrompt SecurityPicoclaw security posture skill with advisory awareness, configuration drift detection, and supply-chain verification guidance.
- Picoclaw Self Pen TestingPrompt SecurityPicoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.
- Picoclaw Traffic GuardianPrompt SecurityPicoclaw runtime traffic monitoring baseline for lightweight AI gateway proxy inspection, egress detection, and posture integration.
- Soul GuardianPrompt SecurityDrift detection + baseline integrity guard for agent workspace files with automatic alerting support