A specialized security auditing skill designed to scan and report vulnerabilities within MCP servers and AI agent packages.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install aiclude-vulns-scan
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install aiclude-vulns-scan using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is AICLUDE Vulnerability Scanner Skill?
The AICLUDE Vulnerability Scanner skill provides a critical security layer for developers working with modern AI infrastructures. It allows users to query the AICLUDE security database to identify known vulnerabilities in MCP servers and AI agent skills, ensuring that every component in your stack meets safety standards. By utilizing Openclaw Skills for security intelligence, developers can prevent the integration of compromised or weak code into their agentic workflows.
This skill bridges the gap between AI development and cybersecurity by providing instant access to risk levels and remediation strategies. Whether you are using a community-built tool or developing your own, this skill ensures that only verified and secure packages are utilized within your environment.
AICLUDE Vulnerability Scanner Skill Use Cases
- Auditing a third-party MCP server before integrating it into a production AI agent.
- Checking for known vulnerabilities in Openclaw Skills packages during the discovery phase.
- Automating security assessments for newly discovered AI tools and repositories.
- Obtaining professional remediation advice for security risks found in agent dependencies.
How AICLUDE Vulnerability Scanner Skill Works
- The user initiates a scan by providing a package name or repository URL via the skill command.
- The skill queries the AICLUDE API to check for an existing vulnerability report.
- If a report is found, the skill retrieves and displays the risk level and specific vulnerability details immediately.
- If the target is not in the database, the skill registers the package for an automated security scan.
- Once the scan is complete, the skill presents a comprehensive assessment including locations of vulnerabilities and fix recommendations.
AICLUDE Vulnerability Scanner Skill Setup
To get started with the AICLUDE security scanner, you can install the package via npm for your environment:
npm install @aiclude/security-skill
Alternatively, if you are using an MCP-compatible host:
npm install @aiclude/security-mcp
AICLUDE Vulnerability Scanner Skill Data Schema & Taxonomy
The skill returns structured security data to help developers make informed decisions. The output is organized into the following schema:
| Field | Description |
|---|---|
| Risk Level | Categorization of threat (CRITICAL, HIGH, MEDIUM, LOW, or INFO). |
| Vulnerability List | A detailed list identifying specific security flaws and their code locations. |
| Risk Assessment | A qualitative summary of the potential impact of the found vulnerabilities. |
| Recommendations | Actionable remediation steps to secure the target package. |
| Dashboard Link | A direct URL to the full visual report on the AICLUDE web platform. |
AICLUDE Vulnerability Scanner Skill Advanced Features
- Auto-Registration: Automatically triggers security scans for packages not previously indexed in the AICLUDE database.
- Intelligent Detection: Automatically determines if a package is an MCP server or a skill without requiring manual type flags.
- Zero-Knowledge Auditing: Performs thorough security checks without needing access to your local source code or private credentials.
- Deep Linking: Seamlessly transitions from CLI-based summaries to full-depth visual reports on the AICLUDE dashboard via Openclaw Skills integration.
SKILL.md
Loading
Related Openclaw Skills
AIclude Security Scanner
A comprehensive security vulnerability scanner for identifying prompt injection, malware, and dependency risks in AI agent skills and MCP servers.
Gork Legacy Skill
A powerful productivity engine that synchronizes Slack, Strava, and Harvest data into automated daily notes and a local SQLite database.
Abstract Onboard
A comprehensive toolkit for AI agents to deploy contracts, bridge assets, and interact with the Abstract ZK Stack Layer 2 network.
Clawd Modifier
A creative customization toolkit for personalizing the Claude Code mascot's appearance and color schemes within your terminal.
OpenSoul Agent Skill
OpenSoul provides AI agents with an immutable, blockchain-based audit log for persistent memory, self-reflection, and economic autonomy.
NEAR Agent Skills
A comprehensive toolkit for NEAR Protocol that provides AI agents with gas optimization strategies and deep on-chain analytics.
METADATA
Featured*
