Clawsec Feed
Clawsec Feed provides a curated stream of threat intelligence to proactively identify and mitigate emerging security risks, enhancing your defenses.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add clawsec-feed npx -- -y @trustedskills/clawsec-feed
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"clawsec-feed": {
"command": "npx",
"args": [
"-y",
"@trustedskills/clawsec-feed"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The Clawsec Feed skill provides a curated stream of threat intelligence specifically for OpenClaw and Moltbot, enabling AI agents to proactively identify and mitigate emerging security risks. It monitors a security advisory feed that is automatically updated daily with CVEs (Common Vulnerabilities and Exposures) from the NIST National Vulnerability Database (NVD). This allows agents to stay informed about potential vulnerabilities affecting these systems.
When to use it
- You only need the advisory feed and not other components of the Clawsec Suite.
- You want to install the feed before installing the full Clawsec Suite.
- You prefer explicit control over how the threat intelligence feed is installed and managed.
- To proactively identify and mitigate emerging security risks related to OpenClaw and Moltbot.
Key capabilities
- Provides a daily updated stream of CVEs for OpenClaw and Moltbot.
- Integrates with the NIST National Vulnerability Database (NVD).
- Can be installed as part of the Clawsec Suite or independently.
- Downloads release metadata/artifacts and advisory feed data.
Example prompts
While this skill doesn't directly respond to natural language prompts, an agent using it would benefit from:
- "Check for new vulnerabilities affecting OpenClaw."
- "What are the latest CVEs related to Moltbot?"
- "Report any newly discovered security advisories."
Tips & gotchas
- Prerequisites: Standalone installation requires
bash,curl,jq,shasum, andunzip. - Verification is crucial: Always verify the release source and checksums before installing on production hosts.
- Automation delegation: This skill itself does not create cron jobs or submit data externally; automation relies on Clawsec Suite or a separate scheduler.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.