prompt-security/clawsec

·
Skill catalog
·
Security feed
·
Documentation
·
Releases
ClawSec is an AGPL collection of security skills and signed advisory intelligence for AI agent runtimes. It helps operators verify skill artifacts, detect configuration drift, audit agent environments, and approval-gate risky installs across **OpenClaw, NanoClaw, Hermes, and Picoclaw**.
---
Install the OpenClaw suite
The OpenClaw entry point is clawsec-suite. Adding the package and activating its persistent hook are separate, reviewable steps.
1. Add the suite
This installs the suite with its signed advisory trust set, heartbeat workflow, guarded installer, and setup scripts. Optional protections remain separate packages that the suite discovers from the published catalog.
2. Review and enable the advisory hook
The setup script prints its preflight before it changes persistent OpenClaw configuration. After it succeeds, restart the OpenClaw gateway and run /new once to trigger the first advisory scan.
To see the current optional protections:
> **Installing for someone else?** Ask their agent to install clawsec-suite with the command above, show the hook preflight, and wait for approval before enabling the hook or optional cron job.
Shell and path notes
For bash and zsh, keep home variables expandable:
Do not single-quote paths that contain $HOME. In PowerShell, build the path explicitly:
POSIX .sh workflows require WSL or Git Bash on Windows.
---
See it work
Detect and respond to agent-file drift
The soul-guardian demo changes a protected agent file, detects the mismatch, and walks through the response.
**Watch the MP4 with audio →**
Watch the suite installation walkthrough
Open the MP4 with audio →
---
How ClawSec protects an agent
| Protection layer | What it does |
| --- | --- |
| **Signed intelligence** | Verifies the advisory feed and checksum manifest before matching published risk against installed skills. |
| **Guarded installs** | Stops on advisory matches and requires a second, explicit confirmation before a risky install can continue. |
| **Integrity and drift** | Gives platform-specific skills baselines for critical files, configuration, attestations, and release artifacts. |
| **Audits and reporting** | Provides focused audit, posture, self-test, and community-reporting packages where the platform contract supports them. |
ClawSec recommends and gates actions; destructive removal and install overrides remain approval-controlled.
Platform entry points
- **OpenClaw** — start with clawsec-suite for signed advisory monitoring and guarded installs, then discover separate drift and audit protections.
- **NanoClaw** — use clawsec-nanoclaw for NanoClaw-specific advisory, integrity, verification, and security-tool workflows.
- **Hermes** — use hermes-attestation-guardian for signed advisory checks, guarded verification, deterministic attestations, and baseline drift detection.
- **Picoclaw** — use picoclaw-security-guardian for posture, advisory, drift, and release-artifact checks. Self-pen testing is a separate opt-in package.