A specialized security auditing tool that produces deterministic vulnerability reports and threat models for Openclaw gateway environments.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install clawdstrike-test
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install clawdstrike-test using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Clawstrike Security Audit?
Clawstrike is a robust security auditing skill designed specifically for Openclaw Skills deployments. Its primary purpose is to identify misconfigurations and potential attack paths within gateway hosts, ensuring that the infrastructure remains resilient against external and internal threats. By analyzing filesystem hygiene, configuration exposure, and plugin integrity, Clawstrike provides a clear assessment of a system's security posture.
Built with a safety-first architecture, the skill operates in a mandatory Verified mode to prevent the execution of untrusted remote content. It automatically redacts sensitive information such as tokens and passwords, ensuring that while the audit is thorough, no secrets are ever exfiltrated. This makes it an essential tool for developers who need to maintain a secure and compliant environment for their Openclaw Skills.
Clawstrike Security Audit Use Cases
- Verifying the configuration and exposure of Openclaw gateway hosts to prevent unauthorized access.
- Performing a deep filesystem hygiene audit to detect untrusted data or insecure permissions.
- Generating a comprehensive threat model for a production deployment of Openclaw Skills.
- Identifying vulnerabilities in third-party plugins or skills through automated pattern scanning.
- Creating a verifiable evidence report for security compliance and incident response.
How Clawstrike Security Audit Works
- The skill initiates a mandatory data collection phase using a local script to gather the system's current state.
- It processes the resulting verified bundle to extract information about the OS, configuration paths, and network status.
- The skill evaluates the system against a predefined checklist of required security validations and supply chain scans.
- It generates a threat model and a findings table, categorizing each item as OK or VULNERABLE based on the collected evidence.
- A final report is produced including specific remediation instructions for every identified vulnerability.
Clawstrike Security Audit Setup
To begin a security audit for your Openclaw Skills, you must first execute the verified collection script within your gateway environment:
# Standard security collection
scripts/collect_verified.sh
# Deep probe for local gateway analysis (requires explicit consent)
scripts/collect_verified.sh --deep
Once the verified-bundle.json is generated, Clawstrike will automatically ingest it to begin the audit process.
Clawstrike Security Audit Data Schema & Taxonomy
Clawstrike uses a structured data model to ensure audit accuracy and data privacy. The data is organized into several key components:
| Component | Purpose |
|---|---|
verified-bundle.json |
The primary evidence source containing system state, config keys, and runtime context. |
required-checks.md |
A mandatory checklist used to evaluate the security of the Openclaw Skills environment. |
evidence-template.md |
Defines the schema for findings, ensuring all evidence is cited and properly redacted. |
threat-model.md |
A template for identifying specific attack vectors related to the gateway and network exposure. |
Clawstrike Security Audit Advanced Features
- Mandatory Verified mode that enforces a strict allowlist of commands for total execution safety.
- Automated redaction engine that identifies and masks OAuth credentials, session tokens, and auth headers.
- Detailed network analysis that cross-references firewall status with port exposure for Openclaw Skills.
- Supply chain inventory tools that treat third-party plugin files as untrusted data for enhanced safety.
- Deterministic reporting that requires specific evidence keys before marking a system as OK.
SKILL.md
Loading
Related Openclaw Skills
Lore Knowledge Base
A sophisticated research repository skill that enables AI agents to ingest, search, and synthesize knowledge with full source citations.
Hot Dog or Not — Battle Skill
A competitive food classification skill that pits your AI agent against NVIDIA's Nemotron model to determine if a photo contains a hot dog.
Space Jobs
Search and apply for thousands of space industry jobs across top aerospace companies directly through your AI agent.
Home Assistant Skill
A powerful Python-based bridge for controlling Home Assistant devices, sensors, and scenes via a command-line interface.
ClawdStrike
A comprehensive security audit and threat modeling tool designed to verify the integrity and safety of OpenClaw gateway hosts.
Clawstrike Security Audit
A comprehensive security auditing tool designed to identify misconfigurations and attack paths within OpenClaw deployments.
Featured*
