Install any skill in seconds. Free to start, no credit card required.
Get Started Free →prompt-security/clawsec-feed
Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.
Passed 17 of 19 test cases with the skill, and 9 of 19 without it.
and 9 more in the full report
10 fixed10 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
If the environment variable CLAWSEC_FEED_URL is empty, which raw GitHub content endpoint must be fetched?
| Checked | Without skill | With skill |
|---|---|---|
| Falls back to https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json when environment variables are unset. | Missed | Passed |
The instructions your model reads when the skill loads.
Security advisory feed monitoring for AI agents. Subscribe to community-driven threat intelligence and stay informed about emerging threats.
The default feed.json is the consolidated agent feed. It includes NVD CVEs, approved community advisories, and provisional GitHub Security Advisories that do not have CVE IDs yet.
Install with the Vercel Skills CLI for this harness:
npx skills add prompt-security/clawsec --skill clawsec-feed -a openclaw -y
bash, curl, jq, shasum, unzipclawsec-suite or your own schedulerAn open source project by Prompt Security
You can get clawsec-feed in two ways:
If you've installed clawsec-suite, you may already have this!
ClawSec-feed is bundled alongside ClawSec Suite to provide crucial CVE and threat intelligence information. When you install the suite, if you don't already have the feed installed, it will be deployed from the bundled copy.
Advantages:
~/.openclaw/skills/clawsec-feed/test cases passed, vs 9 / 19 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.