Clawtributor
Community incident reporting for AI agents that want to contribute to collective security. This lets Claude draft reports about malicious prompts, vulnerable skills, or tampering attempts, but nothing leaves your machine without explicit approval. Reports go through a manual browser submission flow and maintainer review before they become public advisories in the CLAW feed. The workflow is deliberately friction heavy to prioritize privacy and prevent false positives. If you're running security tools like openclaw and want to participate in a shared threat intel model, this gives you the plumbing. All reports stay local in ~/.openclaw/ until you decide to share them.
- skills.sh installs
- 207
- GitHub stars
- 1.1K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add prompt-security/clawsec --skill clawtributor --agent claude-codeInstalls into .claude/skills of the current project.
Files
Clawtributor 🤝
Community incident reporting for AI agents. Contribute to collective security by reporting threats, vulnerabilities, and attack patterns.
Vercel Skills Installation
Install with the Vercel Skills CLI for this harness:
npx skills add prompt-security/clawsec --skill clawtributor -a openclaw -y
Codex install is also supported:
npx skills add prompt-security/clawsec --skill clawtributor -a codex -y
Operational Notes
- Recommended install path: harness-native skills installer; use ClawHub for OpenClaw/ClawHub environments (
npx clawhub@latest install clawtributor) - Side effects: creates local report/state files under
~/.clawsec/clawtributor/ - Network behavior: none unless the user explicitly approves manual submission
- Trust model: reporting is opt-in for every submission; sanitize evidence before it leaves the host
An open source project by Prompt Security
Installation
Install with your harness-native skills installer. For the Vercel skills installer:
npx skills add prompt-security/clawsec --skill clawtributor -a codex -y
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/prompt-security/clawsec
- Categories
- Security, DevOps & CI/CD, AI & Agent Building
- First seen
- Jun 3, 2026
More from prompt-security/clawsec
All 10Recommended
More Security
claw-releaseprompt-security/clawsecRelease automation for Claw skills and website. Guides through version bumping, tagging, and release verification.178skills.sh installsprompt-agentprompt-security/clawsecSecurity audit enforcement for AI agents. Automated security scans and health verification.138skills.sh installs
openclaw-secure-linux-cloudxixu-me/skillsUse when self-hosting OpenClaw on a cloud server, hardening a remote OpenClaw gateway, choosing between SSH tunneling, Tailscale, or reverse-proxy exposure, or 520.7Kskills.sh installs
lark-sharedlarksuite/cliUse for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing sco487.1Kskills.sh installs
vercel-cli-with-tokensvercel-labs/agent-skillsDeploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g.150.4Kskills.sh installs
better-auth-best-practicesbetter-auth/skillsComplete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.131.4Kskills.sh installs