ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
SkillScore86Maintained
Automatic
◆Security & AppSec pack
Last verified 8/16/2026
What it changes
Passed 16 of 19 test cases with the skill, and 4 of 19 without it.
Without skill23%
With skill86%
Checks it passed that the model alone missed
Includes exploitability_score field.
Identifies application value openclaw.
Includes exploitability_rationale field.
and 17 more in the full report
14 fixed5 passed either way3 still failing0 broke
Pass-rate lift
+64 pp
Tokens
+206%
Agent turns
0%
Response time
-66%
Model gemini-3.6-flashMeasured 8/16/2026v119 of 22 cases passed with skill · 19 comparable
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 13 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 13
Prompt
Which remote HTTPS URL does the ClawSec skill discovery script query by default to fetch the authoritative index of installable skills before falling back to local metadata?
Side effects: setup scripts install an advisory hook under ~/.openclaw/hooks, optionally create an unattended openclaw cron job, and use npx clawhub@latest install for guarded installs
Network behavior: fetches signed advisory feed artifacts and remote catalog metadata unless you pin local paths
Trust model: the suite can recommend removal or block risky installs, but removal/install overrides stay approval-gated
This means clawsec-suite can:
monitor the ClawSec advisory feed,
track which advisories are new since last check,
cross-reference advisories against locally installed skills,
recommend removal for malicious-skill advisories and require explicit user approval first,
and still act as the setup/management entrypoint for other ClawSec protections.
Included vs Optional Protections
Built into clawsec-suite
Embedded signed advisory trust set: advisories/feed.json, feed.json.sig, checksums.json, checksums.json.sig, and feed-signing-public.pem
Portable heartbeat workflow in HEARTBEAT.md
Advisory polling + state tracking + affected-skill checks