This is the standalone security advisory feed from Prompt Security's ClawSec project. It pulls daily threat intelligence for AI agents, consolidating NVD CVEs, community advisories, and provisional GitHub security advisories into a single feed.json. You can install it alone or get it bundled with clawsec-suite. The verification process is thorough, maybe overly so: signed manifests, release key fingerprints, and per-file checksums before extraction. If you just need threat intel without the full suite tooling, this gives you the feed component by itself. Requires bash, curl, jq, and standard Unix utilities. No auto-scheduling, you bring your own cron or let the suite handle polling.

skills.sh installs
242
GitHub stars
1.1K
last updated
Aug 21, 2026

Install

$ npx -y skills add prompt-security/clawsec --skill clawsec-feed --agent claude-code

Installs into .claude/skills of the current project.

Files

ClawSec Feed 📡

Security advisory feed monitoring for AI agents. Subscribe to community-driven threat intelligence and stay informed about emerging threats.

The default feed.json is the consolidated agent feed. It includes NVD CVEs, approved community advisories, and provisional GitHub Security Advisories that do not have CVE IDs yet.

Vercel Skills Installation

Install with the Vercel Skills CLI for this harness:

npx skills add prompt-security/clawsec --skill clawsec-feed -a openclaw -y

Operational Notes

  • Required runtime for standalone installation: bash, curl, jq, shasum, unzip
  • Side effects: standalone install only writes local skill files
  • Network behavior: downloads release metadata/artifacts and, if you choose to poll manually, fetches the advisory feed
  • Trust model: this package does not itself create cron jobs or submit data externally; automation is delegated to clawsec-suite or your own scheduler

An open source project by Prompt Security


Installation Options

You can get clawsec-feed in two ways:

Option A: Bundled with ClawSec Suite (Recommended)

Sponsors

Details

Repository
github.com/prompt-security/clawsec
Categories
Security, AI & Agent Building, Automation & Workflows
First seen
Jun 3, 2026

More from prompt-security/clawsec

All 10

Recommended

More Security
1prompt-security avatarclawtributorprompt-security/clawsecHarness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.207skills.sh installs
2prompt-security avatarclaw-releaseprompt-security/clawsecRelease automation for Claw skills and website. Guides through version bumping, tagging, and release verification.178skills.sh installs
3prompt-security avatarprompt-agentprompt-security/clawsecSecurity audit enforcement for AI agents. Automated security scans and health verification.138skills.sh installs
4xixu-me avataropenclaw-secure-linux-cloudxixu-me/skillsUse when self-hosting OpenClaw on a cloud server, hardening a remote OpenClaw gateway, choosing between SSH tunneling, Tailscale, or reverse-proxy exposure, or 520.7Kskills.sh installs
5larksuite avatarlark-sharedlarksuite/cliUse for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing sco487.1Kskills.sh installs
6vercel-labs avatarvercel-cli-with-tokensvercel-labs/agent-skillsDeploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g.150.4Kskills.sh installs