A vulnerability management skill that enables AI agents to monitor security findings, manage repositories, and automate remediation workflows through the Aikido Security platform.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install aikido-security
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install aikido-security using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Aikido Security?
The Aikido Security skill is a powerful integration designed for startups and SMBs looking to streamline their cloud security posture. By leveraging Openclaw Skills, this tool consolidates findings from various security scanners into a unified dashboard that your AI coding agent can interact with directly. It eliminates the need for manual security audits by allowing agents to query findings, manage repository security, and interact with user data programmatically.
Built on the Membrane framework, this skill abstracts away the complexities of authentication and credential management. It provides a secure, developer-friendly interface to track vulnerabilities, add finding notes, and ensure that security remains a continuous part of the development lifecycle without the overhead of enterprise-grade complexity.
Aikido Security Use Cases
- Automating the retrieval and triaging of new security findings in cloud infrastructure.
- Programmatically adding notes to specific security findings for team collaboration.
- Monitoring repository security health during the CI/CD process via AI agents.
- Managing user access and security roles within the Aikido Security platform.
- Querying security data using natural language through Openclaw Skills integration.
How Aikido Security Works
- The agent authenticates with the Membrane platform using a tenant-specific client name to establish a secure session.
- A connection is established to the Aikido Security API, where Membrane handles OAuth or API key persistence server-side.
- The agent uses natural language intent to search for specific security actions, such as listing findings or repositories.
- Actions are executed via the Membrane CLI, which manages the request lifecycle, including automatic credential refreshing.
- For specialized needs, the agent can perform proxy requests directly to the Aikido API while Membrane injects the necessary security headers automatically.
Aikido Security Setup
First, install the Membrane CLI globally to enable Openclaw Skills to interact with the security platform:
npm install -g @membranehq/cli@latest
Next, login to your environment and specify your agent type (e.g., openclaw):
membrane login --tenant --clientName=openclaw
Finally, ensure the connection to Aikido Security is active:
membrane connection ensure "https://www.aikido.dev/" --json
Aikido Security Data Schema & Taxonomy
The Aikido Security skill organizes data into several core entities to facilitate security management:
| Entity | Description |
|---|---|
| Finding | Represents a security vulnerability or issue detected in the infrastructure. |
| Finding Note | Metadata and comments attached to specific findings for remediation tracking. |
| Repository | The source code or cloud assets being monitored for security risks. |
| User | Information regarding account access and security team members. |
All actions return structured JSON output, including inputSchema for parameter validation and outputSchema for predictable data parsing by AI agents.
Aikido Security Advanced Features
- Natural Language Intent Discovery: Use Openclaw Skills to find the right security action by describing the goal in plain English.
- Transparent Proxying: Send raw API requests to any Aikido Security endpoint with automatic header injection and token management.
- Long-polling Connection State: Robust handling of asynchronous connection building with the
--waitflag to ensure the agent only proceeds when the security tunnel is ready. - Multi-Agent Support: Tailored tooling adjustments for different agent types like openclaw, claude, or windsurf to optimize performance.
SKILL.md
Loading
Related Openclaw Skills
AdShares
Manage decentralized advertising marketplaces, blockchain wallets, and ad campaigns directly through your AI agent.
Meta (Facebook) Ads
A comprehensive integration allowing AI agents to manage Facebook and Instagram advertising campaigns, creative assets, and audience targeting.
46elks
A comprehensive telecommunications integration for sending SMS, MMS, and managing voice calls programmatically via an AI agent.
Amazon EKS
A comprehensive integration for managing Amazon EKS clusters and containerized workflows via the Membrane ecosystem.
AlexisHR
A powerful integration for managing employee data, time off policies, and HR workflows directly through AI agents.
Action Network
A powerful integration for managing digital organizing, supporter data, and activist workflows via Openclaw Skills.
Featured*
