Clawsec Suite

If you're running Claude Code in an environment where you pull third-party skills, this gives you a cryptographically signed advisory feed that checks installed skills against known malicious entries. It installs an OpenClaw hook that scans on bootstrap and new sessions, plus a guarded installer that requires double confirmation if an advisory matches. The setup is heavier than most skills (requires node, curl, jq, shasum, openssl, unzip), and it writes hooks and optional cron jobs to your system. The approval-gating is real: it won't auto-remove anything, but it will stop you and show you the advisory before you proceed. Useful if you treat your Claude environment like production and want defense in depth against supply-chain risks.

skills.sh installs: 875
GitHub stars: 1.1K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add prompt-security/clawsec --skill clawsec-suite --agent claude-code

Installs into .claude/skills of the current project.

Files

ClawSec Suite

Vercel Skills Installation

Install with the Vercel Skills CLI for this harness:

npx skills add prompt-security/clawsec --skill clawsec-suite -a openclaw -y

Operational Notes

Required runtime: node, npx, openclaw, curl, jq, shasum, openssl, unzip
Side effects: setup scripts install an advisory hook under ~/.openclaw/hooks, optionally create an unattended openclaw cron job, and use npx clawhub@latest install for guarded installs
Network behavior: fetches signed advisory feed artifacts and remote catalog metadata unless you pin local paths
Trust model: the suite can recommend removal or block risky installs, but removal/install overrides stay approval-gated

This means clawsec-suite can:

monitor the ClawSec advisory feed,
track which advisories are new since last check,
cross-reference advisories against locally installed skills,
recommend removal for malicious-skill advisories and require explicit user approval first,
and still act as the setup/management entrypoint for other ClawSec protections.