A sophisticated integration for Code Dx that enables AI agents to automate security vulnerability correlation, prioritization, and remediation management.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install code-dx
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install code-dx using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Code Dx?
Code Dx is a robust static and dynamic code analysis tool designed to aggregate and correlate software vulnerabilities from diverse sources. By leveraging Openclaw Skills, developers can bridge the gap between their security tools and AI-driven workflows, allowing for automated interaction with projects, findings, and analysis records. This integration simplifies the complexities of security operations by providing a unified interface for managing application risks.
The Code Dx skill utilizes the Membrane framework to provide a seamless developer experience. It removes the friction of manual authentication and credential management, offering a high-level abstraction for interacting with the Code Dx API. Whether you are automating security reports or building a custom vulnerability response agent, this skill provides the necessary tooling to interact with the Code Dx ecosystem securely and efficiently.
Code Dx Use Cases
- Automating the retrieval and summarization of security findings from multiple code analysis tools.
- Synchronizing vulnerability data between Code Dx projects and external issue trackers.
- Building AI-powered security assistants that can query and comment on specific security findings.
- Monitoring system licenses and project health through automated CLI scripts.
- Programmatically triggering or checking the status of static analysis workflows.
How Code Dx Works
- The Membrane CLI is used to authenticate the user and establish a secure connection to the Code Dx instance.
- Openclaw Skills leverage the connection ID to discover available actions based on natural language intent.
- The skill interacts with the Code Dx API via pre-built actions or through a transparent proxy that handles headers and credential refreshes.
- Vulnerability data is processed and returned in structured JSON format for easy ingestion by AI agents or CI/CD pipelines.
- Status polling ensures that long-running operations, like connection building or analysis, are completed before proceeding to the next step.
Code Dx Setup
First, install the Membrane CLI:
npm install -g @membranehq/cli@latest
Authenticate your agent (specify openclaw as the agent type):
membrane login --tenant --clientName=openclaw
Establish a connection to your Code Dx instance:
membrane connection ensure "https://your-codedx-url.com" --json
If the state is BUILDING, poll until it is READY:
npx @membranehq/cli connection get <id> --wait --json
Code Dx Data Schema & Taxonomy
The skill organizes Code Dx data into a hierarchical taxonomy. Below is the primary structure used by Openclaw Skills:
| Entity | Components |
|---|---|
| Project | Includes Analysis records and Findings |
| Finding | Individual vulnerabilities including user Comments |
| User | Identity management within the security platform |
| System | High-level metadata including License information |
All interactions return structured JSON, allowing for granular filtering of parameters such as actionId, inputSchema, and outputSchema.
Code Dx Advanced Features
- Natural language action discovery to find the most efficient API interaction for a specific security task.
- Transparent proxy requests that automatically inject authentication headers and base URLs.
- Long-polling support with the --wait flag for managing asynchronous connection states.
- Multi-agent support optimized for various harnesses including Claude and Openclaw Skills.
- Automated credential lifecycle management that eliminates the need to store local secrets or API keys.
SKILL.md
Loading
Related Openclaw Skills
Continuum Security SLNE
A comprehensive security lifecycle management integration for automating threat modeling, vulnerability tracking, and security compliance within AI-driven development workflows.
Peepl
A comprehensive integration for managing remote or hybrid teams through HR tools, activity tracking, and automated communication workflows.
Sesame
An automated HR and employee experience integration that manages time tracking, performance reviews, and secure vault data via the Membrane framework.
Sessions Integration for Membrane
A powerful integration allowing developers to manage session replay data, participants, and user behavior insights through the Membrane CLI.
Mailchimp Marketing Automation
A comprehensive integration allowing AI agents to manage Mailchimp campaigns, audiences, and templates through structured actions and automated authentication.
ShipperHQ
An AI-powered integration to manage complex e-commerce shipping rates, rules, and carriers through the Membrane ecosystem.
Featured*
