Automate security vulnerability testing and CI/CD security workflows via the Membrane-powered Bright Security skill.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install bright-security
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install bright-security using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Bright Security?
Bright Security is a developer-focused security testing platform designed to find and fix vulnerabilities early in the software development lifecycle. By utilizing Openclaw Skills, developers can seamlessly integrate Dynamic Application Security Testing (DAST) into their workflows. This skill provides a robust interface for managing scans, configuring security projects, and tracking issues directly through an AI agent, ensuring that security remains a core part of the automated CI/CD pipeline.
Bright Security Use Cases
- Automating security scans during the deployment phase of a CI/CD pipeline.
- Programmatically retrieving and triaging vulnerability reports and security issues.
- Managing scan configurations and organizational security projects via CLI commands.
- Integrating real-time security monitoring into developer-centric AI agent workflows.
How Bright Security Works
- The skill utilizes the Membrane CLI to establish a secure, authenticated link between the AI agent and the Bright Security API.
- Users authenticate via a managed OAuth flow, where Openclaw Skills handles credential storage and automatic token refreshing.
- The AI agent identifies necessary actions by searching through a library of pre-built security functions using natural language intent.
- Commands are executed through a secure proxy that automatically injects required headers and handles complex data pagination.
Bright Security Setup
To get started with this skill, install the CLI and configure your connection:
# Install the Membrane CLI
npm install -g @membranehq/cli@latest
# Log in to authenticate your agent
membrane login --tenant --clientName=openclaw
# Establish a connection to Bright Security
membrane connection ensure "https://brightsec.com/" --json
Bright Security Data Schema & Taxonomy
The skill organizes security data into structured entities to ensure Openclaw Skills can easily parse and act upon the information:
| Entity | Description |
|---|---|
| Scan | Represents a security testing execution, including its configuration and status. |
| Issue | Detailed records of found vulnerabilities, including severity levels and descriptions. |
| Project | Containers used to organize scans and assets within a specific application scope. |
| Organization | High-level metadata regarding the workspace and user permissions. |
Bright Security Advanced Features
- Intent-based discovery allows the agent to find the most relevant security action using natural language queries.
- Transparent API proxying enables custom requests to the Bright Security API while maintaining automated auth handling.
- Polling mechanisms with wait flags allow for long-running security scan status updates.
- Machine-readable JSON output for all actions to facilitate complex agent-led automation chains.
SKILL.md
Loading
Related Openclaw Skills
Cloud Foundry
A comprehensive integration enabling AI agents to manage Cloud Foundry organizations, spaces, and applications through automated Membrane CLI workflows.
Clari Integration for AI Agents
A powerful revenue operations skill that enables AI agents to manage opportunities, accounts, and activities within Clari.
Tray Integration
A low-code automation skill that enables AI agents to manage data, records, and complex workflows across SaaS applications via the Tray.io platform.
Userflow Integration Skill
A powerful integration for managing Userflow product tours, onboarding flows, and user segments directly through an AI agent.
ChartIQ
A professional-grade financial charting integration that enables AI agents to manage interactive data visualizations and technical studies via Openclaw Skills.
Duffel
A comprehensive flight booking API integration that enables AI agents to search, book, and manage airline travel through a standardized interface.
Featured*
