mcpField
S
secureclaw

secureclaw

github.com/adversa-aiSecurity34870 installsUpdated 35w ago
Repository

About secureclaw

A security-hardening skill for OpenClaw that provides audit, posture, skill-scanning, and API-cost reporting tools. It is intended for checking an instance's security and reviewing skills before installation.

Key features

  1. 01Security audit with remediation guidance
  2. 02Current posture, score, and alerts
  3. 03ClawHub skill malware-pattern scan
  4. 04API cost tracking and projections

Use cases

  1. 01Reviewing OpenClaw security status
  2. 02Finding hardening actions from audit results
  3. 03Checking a ClawHub skill before installation
  4. 04Reviewing API spend and cost alerts

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/adversa-ai/secureclaw --skill secureclaw

After installing, type/secureclawin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

.gitignore
.gitleaksignore
demo.ts
LICENSE
openclaw.plugin.json
package-lock.json
package.json
README.md
ioc/
indicators.json
skill/
checksums.json
README.md
skill.json
skill/configs/
dangerous-commands.json
injection-patterns.json
privacy-rules.json
supply-chain-ioc.json
skill/scripts/
check-advisories.sh
check-integrity.sh
check-privacy.sh
emergency-response.sh
install.sh
quick-audit.sh
quick-harden.sh
scan-skills.sh
uninstall.sh
src/
auditor.test.ts
auditor.ts
hardener.test.ts
hardener.ts
src/hardening/
config-hardening.test.ts

Details

From the project README

SecureClaw — Security Hardening

Tools

security_audit

Run a comprehensive security audit of this OpenClaw instance. Returns findings with severity, description, and remediation steps. Use when the user asks about security status or hardening.

security_status

Get current security posture: score, active monitors, recent alerts.

skill_scan

Scan a ClawHub skill for malicious patterns before installation. Required parameter: skill name or URL.

cost_report

Show API cost tracking data: current spend, projections, and alerts.

Comments

Markdown supported