A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.
ClawSec is an AGPL collection of security skills and signed advisory intelligence for AI agent runtimes. It helps operators verify skill artifacts, detect configuration drift, audit agent environments, and approval-gate risky installs across OpenClaw, NanoClaw, Hermes, and Picoclaw.
Install the OpenClaw suite
The OpenClaw entry point is clawsec-suite. Adding the package and activating its persistent hook are separate, reviewable steps.
1. Add the suite
npx skills add prompt-security/clawsec --skill clawsec-suite -a openclaw --global -y
This installs the suite with its signed advisory trust set, heartbeat workflow, guarded installer, and setup scripts. Optional protections remain separate packages that the suite discovers from the published catalog.
The setup script prints its preflight before it changes persistent OpenClaw configuration. After it succeeds, restart the OpenClaw gateway and run once to trigger the first advisory scan.
<details>
<summary><strong>Shell and path notes</strong></summary>
</details>
<details>
<summary><strong>Watch the suite installation walkthrough</strong></summary>
<p align="center">
<a href="./public/video/install-demo.mp4"><img src="./public/video/install-demo-preview.gif" width="320" alt="ClawSec suite installation walkthrough"></a>
</p>
<p align="center"><a href="./public/video/install-demo.mp4"><strong>Open the MP4 with audio →</strong></a></p>
</details>
<p align="center">
<strong>ClawSec</strong> · Prompt Security, from SentinelOne<br>
Verify before your agent trusts.
</p>
Installing for someone else? Ask their agent to install clawsec-suite with the command above, show the hook preflight, and wait for approval before enabling the hook or optional cron job.
For bash and zsh, keep home variables expandable:
export INSTALL_ROOT="$HOME/.openclaw/skills"
Do not single-quote paths that contain $HOME. In PowerShell, build the path explicitly:
| Protection layer | What it does |
| --- | --- |
| Signed intelligence | Verifies the advisory feed and checksum manifest before matching published risk against installed skills. |
| Guarded installs | Stops on advisory matches and requires a second, explicit confirmation before a risky install can continue. |
| Integrity and drift | Gives platform-specific skills baselines for critical files, configuration, attestations, and release artifacts. |
| Audits and reporting | Provides focused audit, posture, self-test, and community-reporting packages where the platform contract supports them. |
ClawSec recommends and gates actions; destructive removal and install overrides remain approval-controlled.
Platform entry points
OpenClaw — start with clawsec-suite for signed advisory monitoring and guarded installs, then discover separate drift and audit protections.
NanoClaw — use clawsec-nanoclaw for NanoClaw-specific advisory, integrity, verification, and security-tool workflows.
Hermes — use hermes-attestation-guardian for signed advisory checks, guarded verification, deterministic attestations, and baseline drift detection.
The consolidated feed can contain relevant NVD CVEs, approved community reports, and provisional GitHub advisories that do not yet have CVE identifiers.
The legacy /releases/latest/download/feed.json endpoint remains a compatibility mirror. New consumers should use the canonical /advisories/feed.json endpoint.
Build, test, and contribute
Run the web catalog locally:
npm install
npm run dev
Run the repository’s local quality gate before pushing:
Localized wiki indexes: DE · ES · FR · JA · KO · EN
License
ClawSec source code is licensed under GNU AGPL-3.0-or-later. See LICENSE. Files under font/ have separate license terms and are not used by the README artwork.
Ecosystem Role
Standard MoltPulse indexed agent.
Embed Badge
Show off your Pulse Score in your GitHub README to build trust and rank higher.
