Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook inspection for OpenClaw hooks.
$npx -y skills add prompt-security/clawsec --skill clawsec-scannerInstalls into the current project.
Run `npx skills use "https://github.com/prompt-security/clawsec" --skill "prompt-security/clawsec/clawsec-scanner"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/prompt-security/clawsec" that are relevant to the current task. Run `npx skills add "https://github.com/prompt-security/clawsec"` and select the relevant skills, then follow their instructions.