Skip to content
TrustedSkillsbeta
Back to all skills

Clawsec Feed

Checked
prompt-security·vlatest·security·AGPL-3.0

Clawsec Feed provides a curated stream of threat intelligence to proactively identify and mitigate emerging security risks, enhancing your defenses.

Repository

Install on your platform

Showing Claude Code. One command installs this skill into any of the agents below.

  1. 1

    Run this in your project

    terminal
    $ npx skills add prompt-security/clawsec --skill clawsec-feed -a claude-code

  2. Uses the open-source skills CLI and needs Node.js. Add -g to install it for your user instead of this project.

What we know about this skill

Publisher

prompt-security

Taken from the source listing. We haven't verified who controls this account.

Install target

Live repository

Not pinned. Installing fetches whatever the repository holds at the time you run the command.

No human has reviewed this code. The checks below are a static scan of the files at one commit — nobody has run this skill or judged whether it works. A skill runs with whatever access you give your agent, so read the source before you install it.

Automated safety checks

scanned

This skill passed all 6 checks. We read its files at one commit and looked for the things that make a skill dangerous to run — not for whether it works.

  • Declares what it does: passed

    SKILL.md parses and declares a name and a description.

    SKILL.md exists, its frontmatter parses, and it declares a name and a description.

  • No undeclared network calls: passed

    Only contacts known or declared hosts: github.com, api.github.com.

    Every host the skill dials — from its scripts, its config endpoints or the commands it tells the agent to run — is either well-known package and API infrastructure or declared in its own frontmatter. Links in documentation are not counted.

    Hosts contacted

    github.comsource hostapi.github.comsource host

  • No obfuscated payloads: passed

    No encoded or obfuscated payloads.

    No base64, hex or compressed blob is decoded and then executed, and no encoded shell commands.

  • No credential access: passed

    Reads no keys, tokens, keychains or credential files.

    Neither the code nor the SKILL.md instructions read SSH keys, cloud credentials, keychains, token stores, browser cookie databases or dotfiles that hold secrets.

  • No pipe-to-shell installers: passed

    No pipe-to-shell or download-and-run installers.

    No `curl … | sh` pattern, in the code or in the instructions, that runs code fetched at run time.

  • Pinned to a commit: passed

    Scanned prompt-security/clawsec at c8faf9de88.

    The exact upstream commit SHA that was scanned is recorded, so the result refers to specific bytes.

Commit
c8faf9de88
Manifest
skills/clawsec-feed/SKILL.md
Scanned
4 files, 1,025 lines
This is a static scan, not a review. It reads the skill's files; it does not run them, and it cannot tell you whether the skill is any good or whether the code does what its description says. A skill runs with whatever access you give your agent.
What each check looks for →

About this skill

What it does

The Clawsec Feed skill provides a curated stream of threat intelligence specifically for OpenClaw and Moltbot, enabling AI agents to proactively identify and mitigate emerging security risks. It monitors a security advisory feed that is automatically updated daily with CVEs (Common Vulnerabilities and Exposures) from the NIST National Vulnerability Database (NVD). This allows agents to stay informed about potential vulnerabilities affecting these systems.

When to use it

  • You only need the advisory feed and not other components of the Clawsec Suite.
  • You want to install the feed before installing the full Clawsec Suite.
  • You prefer explicit control over how the threat intelligence feed is installed and managed.
  • To proactively identify and mitigate emerging security risks related to OpenClaw and Moltbot.

Key capabilities

  • Provides a daily updated stream of CVEs for OpenClaw and Moltbot.
  • Integrates with the NIST National Vulnerability Database (NVD).
  • Can be installed as part of the Clawsec Suite or independently.
  • Downloads release metadata/artifacts and advisory feed data.

Example prompts

While this skill doesn't directly respond to natural language prompts, an agent using it would benefit from:

  • "Check for new vulnerabilities affecting OpenClaw."
  • "What are the latest CVEs related to Moltbot?"
  • "Report any newly discovered security advisories."

Tips & gotchas

  • Prerequisites: Standalone installation requires bash, curl, jq, shasum, and unzip.
  • Verification is crucial: Always verify the release source and checksums before installing on production hosts.
  • Automation delegation: This skill itself does not create cron jobs or submit data externally; automation relies on Clawsec Suite or a separate scheduler.