A documentation-first security skill providing transparency and guidance for performing static analysis on third-party tools.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install crawsecure
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install crawsecure using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is CrawSecure?
CrawSecure is a documentation-centric security skill designed for the ecosystem to promote security awareness and transparency. Its primary purpose is to provide a clear framework for understanding, documenting, and guiding the safe usage of static analysis tools. By focusing on documentation rather than execution, it provides a safe environment for developers to learn about risk signals without introducing new attack vectors. This skill helps users evaluate the safety of various Openclaw Skills by defining what constitutes dangerous behavior and how to interpret security findings.
The skill serves as the central reference point for the external CrawSecure CLI, ensuring that users understand the trust boundaries and security philosophy required for modern development. It emphasizes local, offline analysis and provides a standardized classification system for identifying safe, medium, and high-risk patterns in code and configuration files.
CrawSecure Use Cases
- Assessing the security implications of third-party Openclaw Skills before local installation.
- Learning to identify dangerous command patterns and sensitive file references in automation scripts.
- Establishing a security-first workflow for technical teams using static analysis tools.
- Referencing security best practices to ensure new skill development adheres to transparency standards.
How CrawSecure Works
- The user accesses the CrawSecure documentation to understand the logic behind security risk signals.
- The skill explains how to identify destructive command patterns or execution-related behaviors.
- Guidance is provided on how to spot references to sensitive files like .env or private SSH keys.
- Users apply the documented risk classification system (SAFE, MEDIUM, HIGH) to evaluate their external tools and Openclaw Skills environment.
CrawSecure Setup
To add this documentation-only skill to your environment, use the standard installation command for your agent. Note that this skill requires no special permissions and operates in a read-only capacity.
# Install the CrawSecure documentation skill
openclaw install crawsecure
To perform actual security scans, you must independently install the CrawSecure CLI from its official GitHub repository or official website.
CrawSecure Data Schema & Taxonomy
CrawSecure organizes security information based on risk levels and behavioral patterns. The documentation follows this metadata structure:
| Category | Description | Scope |
|---|---|---|
| Risk Signal | Detection logic for dangerous or destructive commands | Static Analysis |
| File Sensitivity | Identification of private keys, .env, and .ssh files | Credential Security |
| Trust Boundaries | Definition of read-only, network-less, and execution-less limits | Operational Security |
| Classification | SAFE, MEDIUM, and HIGH risk categorization levels | Risk Assessment |
CrawSecure Advanced Features
- Comprehensive mapping of static analysis signals for dangerous CLI execution patterns.
- Detailed breakdown of indicator-of-compromise (IoC) patterns for environment variables and secrets.
- Security philosophy guidelines for maintaining air-gapped or local-only trust boundaries.
- Strategic documentation on integrating external security audits with Openclaw Skills.
SKILL.md
Loading
Related Openclaw Skills
OpenClaw Operations (openclaw-ops)
A specialized operational toolkit designed for rescue agents to diagnose, repair, and maintain OpenClaw Gateway instances.
Media News Digest
An automated pipeline for gathering and synthesizing media and entertainment industry news from 65+ specialized sources.
Cobo TSS Node Management
A specialized management toolkit for Cobo TSS Nodes, providing automated installation, service management, and secure MPC share maintenance.
Geekbench Benchmark Tracker
A high-precision skill for retrieving and validating real-time Geekbench benchmark scores for the latest mobile flagship devices.
Minibook Skill
A comprehensive collaboration skill that connects AI agents to Minibook instances for project management, threaded discussions, and roadmap tracking.
AgentMailGuard
A zero-dependency security middleware that sanitizes email and calendar data to prevent prompt injection and malicious exfiltration in AI agents.
METADATA
Featured*
