A comprehensive security auditing skill that identifies vulnerabilities like secret leaks, injection risks, and authorization flaws in your codebase.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install axodus-security-checks
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install axodus-security-checks using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Security Check?
The Security Check skill is a specialized tool designed to perform rigorous security-focused reviews of code changes and subsystems. Built to identify high-risk vulnerabilities before they reach production, it ensures that your application maintains a high standard of security hygiene. As part of the ecosystem of Openclaw Skills, this tool automates the detection of secrets exposure, authentication issues, and unsafe execution paths.
By integrating this skill into your development workflow, you gain a systematic approach to security that covers everything from dependency management to input sanitization. Whether you are building financial systems or simple web applications, utilizing Openclaw Skills like this one helps prevent data breaches and ensures compliance with modern security standards by providing evidence-based findings and actionable remediation.
Security Check Use Cases
- Before deploying new features that handle sensitive user data, financial transactions, or authentication credentials.
- When integrating new third-party dependencies or external APIs into your project codebase.
- After performing any significant changes to the authentication or authorization logic within your application.
- To conduct routine security audits of existing modules and sub-systems for potential injection risks.
How Security Check Works
- Define the scope of the inspection by identifying the specific files, modules, or git diffs that require a review.
- Analyze the configuration and source code for committed secrets, tokens, or plaintext keys in environment files.
- Evaluate input handling processes to ensure proper validation and sanitization against SQL, NoSQL, and command injection attacks.
- Verify authentication and authorization checks at every privileged action to prevent insecure defaults.
- Audit dependencies for known vulnerabilities and ensure package versions are pinned correctly.
- Generate a structured security report including evidence-based findings, risk severity, and remediation steps.
Security Check Setup
To use this security auditing capability within Openclaw Skills, ensure your environment is configured for static analysis. You can trigger a security check by specifying the target scope and language parameters.
# Example of initiating a security review via the CLI
openclaw run security-check --scope "./src/api" --languages "[\"ts\",\"py\"]"
Security Check Data Schema & Taxonomy
The skill generates a structured YAML security report that organizes findings by severity and impact. This data can be consumed by other Openclaw Skills for automated remediation.
| Field | Type | Description |
|---|---|---|
| summary | String | A high-level overview of the top risks identified during the scan. |
| findings | Array | A list of specific security issues found in the code. |
| findings.id | String | Unique identifier for the vulnerability (e.g., SEC-001). |
| findings.severity | String | Risk level: high, medium, or low. |
| findings.issue | String | A detailed description of the security flaw and its impact. |
| findings.location | Array | Specific file paths or code blocks where the issue resides. |
| findings.remediation | String | Step-by-step instructions on how to resolve the security vulnerability. |
Security Check Advanced Features
- Support for custom threat models to tailor analysis based on specific asset risks and attacker capabilities.
- Multi-language support covering TypeScript, Python, Solidity, and other common development languages.
- Automated redacting of discovered secrets within logs and configurations to prevent accidental exposure during the audit.
- Compliance-driven constraints to align security checks with specific corporate governance boundaries.
- Integration with observability workflows to ensure audit trails exist for all sensitive actions identified.
SKILL.md
Loading
Related Openclaw Skills
OpenAI Image to Video
An automated AI video creation tool that converts static images into professional-grade animated video clips using remote GPU rendering.
Douyin Creator Marketplace (Xingtu) Conversion Resources API
A specialized API skill for retrieving Douyin Creator Marketplace (Xingtu) conversion data, including video and product performance for specific creators.
Deep Coding P
An advanced multi-agent framework that orchestrates specialized agents to build, review, and test complex software architectures.
Douyin Xingtu Follower Distribution API Skill
A specialized skill to retrieve detailed follower demographics and interest metrics for Douyin creators via the Xingtu Marketplace API.
Explore Philippines - Manila Boracay Flights
A travel-focused CLI skill for searching and booking flights to major Philippines destinations using real-time Fliggy data.
Eco Hotel Flights
A specialized travel booking skill for AI agents that prioritizes sustainable destinations and real-time flight data via the flyai-cli.
Featured*
