F
Frank-Masciopinto/ironheights
Ironheights protects any AI bot that installs it: scan agent skills (OpenClaw, Claude, Grok Bot, Codex,…
View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site
Install & config
Client config (built from the install command this repo gives)
{
"mcpServers": {
"frank-masciopinto-ironheights": {
"command": "npx",
"args": ["ironheights"]
}
}
}Parsed from the README we fetched on 2026-10-31; we have not executed it.
command/args come from the install command the repository states. When it is ambiguous, the project README wins.
VS Code (.vscode/mcp.json - the key is servers)
{
"servers": {
"frank-masciopinto-ironheights": {
"command": "npx",
"args": ["ironheights"]
}
}
}Same server, but VS Code keeps it under <code>servers</code>.
Claude Code (command line)
claude mcp add --transport stdio frank-masciopinto-ironheights -- npx ironheights
Claude Code does not read a config file; add the server with this command.
Key names differ by client: Clients & CLI
- Star count
- 4 ★ · Frank-Masciopinto/ironheights · read from the GitHub search API · (checked 2026-11-13 20:00:50)
- Source
- read directly from its GitHub page · type: open-source project
- Harvest history
- first seen 2026-11-01 · last seen 2026-11-14 · seen 14× · listed by 2 sources
- Score
- score 203 · 4 ★ · 2 sources · repo
- Install
npx ironheights
FAQ (answers come from our records)
How do I install it?
The repository provides this install command:
npx ironheights. It comes from the repository itself; we cannot guarantee it runs as-is in your client.Who is it for?
We filed it under these tags: 开源项目. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
repository
Frank-Masciopinto/ironheights；first catalogued 2026-11-01；last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.# Ironheights
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
If Ironheights is useful to you, a star on ClawHub or GitHub helps other OpenClaw, Claude and Grok Bot users find it.
Ironheights protects any AI bot that installs it. It is an open-source, local-first security scanner for AI agent skills (OpenClaw, Claude Code and Claude.ai, Grok Bot, Codex, Cursor, MCP), plus:
Threat model as code: ironheights threatmodel checks every pull request against ironheights.threatmodel.yml, and reports each claim as passed, violated or untested (docs).
MCP server: ironheights mcp lets any MCP client call checkskill before installing a skill (docs).
Drift guard: ironheights drift flags a skill or MCP tool that changes after you approved it, including config keys that were added or restrictions that were loosened (docs).
Posture report: ironheights report covers worst reach, grades, a config hash, drift, threat-model coverage and the OWASP LLM Top 10 across a repo or org (docs).
Website: www.ironheights.dev
Ironheights scans any skill folder with a SKILL.md, whichever agent it is for, and adds an integrity monitor and runtime guard for OpenClaw. To check a Claude or Grok Bot skill, run npx ironheights scan ./path/to/skill before you upload or install it. Auto-discovery of installed skills, baselines, the guard, audit-config and safe-install are OpenClaw/ClawHub-only for now. It reads skill files as data, looks for risky patterns with fixed rules, and compares skill and agent files with a baseline you save on the same machine.
It does not send telemetry, and it does not run the files it scans. Scans are fully local. The only network call made without a flag is a version check against npm and ClawHub, at most once every 6 hours; it only reports new versions, never installs anything, and can be turned off (see Updates). Other network use happens only when you run fetch, safe-install, advisories update, --online, scan --llm, scan --check-registry, or review.
## Install
Install the OpenClaw skill from ClawHub (recommended):
bash
clawhub install ironheights
The skill uses the ironheights CLI, which requires Node.js 20 or newer on macOS, Linux, and Windows.
OpenClaw 2026.9.3 requires Node.js >=24.16.0 =26.1.0. ironheights doctor prints whether the current runtime is inside that range.
Then install the CLI, or run it once with npx:
bash
npx ironheights scan ./path/to/skill
Or install the command:
bash
npm install -g ironheights
ironheights scan ./path/to/skill
ih is the same command. From a git checkout:
bash
npm install
npm run build
node dist/cli/index.js scan test/fixtures/benign
## Drift watch (rug-pull detection)
ironheights drift approve records what you reviewed; ironheights drift check (or watch) flags any later change: file hashes, the SKILL.md description, new URL hosts, new credential paths, MCP server entries, MCP tool descriptions, and config-key drift (a new key, a removed restriction, or a restriction whose value got looser). Local only, no telemetry. See docs/drift.md.
## Posture report
ironheights report --html posture.html lists every installed skill with its worst reach, grade, config hash, threat-model coverage, drift since approval and an OWASP LLM Top 10 mapping, with a trend over runs (--history). A skill whose config hash changed since the last history line is marked regraded. See docs/report.md.
Ironheights protects any AI bot that installs it. It is an open-source, local-first security scanner for AI agent skills (OpenClaw, Claude Code and Claude.ai, Grok Bot, Codex, Cursor, MCP), plus:
Threat model as code: ironheights threatmodel checks every pull request against ironheights.threatmodel.yml, and reports each claim as passed, violated or untested (docs).
MCP server: ironheights mcp lets any MCP client call checkskill before installing a skill (docs).
Drift guard: ironheights drift flags a skill or MCP tool that changes after you approved it, including config keys that were added or restrictions that were loosened (docs).
Posture report: ironheights report covers worst reach, grades, a config hash, drift, threat-model coverage and the OWASP LLM Top 10 across a repo or org (docs).
Website: www.ironheights.dev
Ironheights scans any skill folder with a SKILL.md, whichever agent it is for, and adds an integrity monitor and runtime guard for OpenClaw. To check a Claude or Grok Bot skill, run npx ironheights scan ./path/to/skill before you upload or install it. Auto-discovery of installed skills, baselines, the guard, audit-config and safe-install are OpenClaw/ClawHub-only for now. It reads skill files as data, looks for risky patterns with fixed rules, and compares skill and agent files with a baseline you save on the same machine.
It does not send telemetry, and it does not run the files it scans. Scans are fully local. The only network call made without a flag is a version check against npm and ClawHub, at most once every 6 hours; it only reports new versions, never installs anything, and can be turned off (see Updates). Other network use happens only when you run fetch, safe-install, advisories update, --online, scan --llm, scan --check-registry, or review.
## Install
Install the OpenClaw skill from ClawHub (recommended):
bash
clawhub install ironheights
The skill uses the ironheights CLI, which requires Node.js 20 or newer on macOS, Linux, and Windows.
OpenClaw 2026.9.3 requires Node.js >=24.16.0 =26.1.0. ironheights doctor prints whether the current runtime is inside that range.
Then install the CLI, or run it once with npx:
bash
npx ironheights scan ./path/to/skill
Or install the command:
bash
npm install -g ironheights
ironheights scan ./path/to/skill
ih is the same command. From a git checkout:
bash
npm install
npm run build
node dist/cli/index.js scan test/fixtures/benign
## Drift watch (rug-pull detection)
ironheights drift approve records what you reviewed; ironheights drift check (or watch) flags any later change: file hashes, the SKILL.md description, new URL hosts, new credential paths, MCP server entries, MCP tool descriptions, and config-key drift (a new key, a removed restriction, or a restriction whose value got looser). Local only, no telemetry. See docs/drift.md.
## Posture report
ironheights report --html posture.html lists every installed skill with its worst reach, grade, config hash, threat-model coverage, drift since approval and an OWASP LLM Top 10 mapping, with a trend over runs (--history). A skill whose config hash changed since the last history line is marked regraded. See docs/report.md.
Listed badge (optional)
Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.
[](https://anclum.com/en/s/frank-masciopinto-ironheights/)
- Source
- github · https://github.com/Frank-Masciopinto/ironheights
- Browse by field
- Open source
- Traction
- 4 ★
- Listed by
- 2 independent sources
- added
- today
More like this
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.