JupiterOne Skill for Openclaw

A powerful integration for managing cybersecurity assets and automating security compliance workflows through the JupiterOne platform.

gora050
v1.0.2
May 1, 2026
0
421
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install jupiterone

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install jupiterone using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is JupiterOne Skill?

The JupiterOne skill for Openclaw Skills empowers security teams to gain deep visibility into their digital infrastructure. By leveraging the Membrane framework, this skill allows AI agents to interact directly with JupiterOne's graph-based asset management system, enabling them to query complex relationships between entities, applications, and data assets.

This integration simplifies the developer experience by offloading the complexities of authentication and credential management to the Membrane CLI. It provides a secure, streamlined way to perform security audits, track compliance, and automate response workflows without manually handling sensitive API tokens or session refreshes.

JupiterOne Skill Use Cases

  • Automating security compliance audits by querying asset configurations.
  • Visualizing and managing complex entity relationships across cloud infrastructure.
  • Running saved search queries to identify vulnerabilities or unauthorized assets.
  • Building automated response workflows that trigger based on JupiterOne entity changes.
  • Streamlining asset discovery for incident response teams.

How JupiterOne Skill Works

  1. The Openclaw Skills agent authenticates using the Membrane CLI with a specific tenant and agent type.
  2. A connection is established to the JupiterOne domain, with Membrane handling the OAuth or API key handshake.
  3. The agent polls the connection status until it reaches a READY state, ensuring all permissions are active.
  4. Using natural language intent, the agent searches for specific JupiterOne actions (like querying entities) via the Membrane action list.
  5. The agent executes the chosen action with JSON parameters, receiving structured security data in return.
  6. For specialized tasks, the agent can use proxy requests to hit the JupiterOne API directly while maintaining automated authentication headers.

JupiterOne Skill Setup

First, install the Membrane CLI globally to enable Openclaw Skills integration:

npm install -g @membranehq/cli@latest

Authenticate your agent by specifying the agent type:

membrane login --tenant --clientName=openclaw

Create a secure connection to your JupiterOne instance:

membrane connection ensure "https://www.jupiterone.com/" --json

If the state is BUILDING, wait for the connection to finalize:

membrane connection get <id> --wait --json

JupiterOne Skill Data Schema & Taxonomy

The skill organizes JupiterOne data through a structured schema managed by the Membrane interface. It primarily interacts with the following data types:

Data Component Description
Entities Individual assets like servers, users, code repos, or firewall rules.
Relationships The graph links defining how entities interact (e.g., 'User OWNS Device').
Search Queries J1QL (JupiterOne Query Language) strings used to filter the asset graph.
Action Schema JSON-based input/output definitions for every API method available.
Connection Metadata Information regarding the authentication state and tenant ID.

JupiterOne Skill Advanced Features

  • Multi-agent support: Tailor tool adjustments by specifying agent types like openclaw, claude, or windsurf during login.
  • Transparent Proxy: Execute raw API requests with automated header injection and token refreshing.
  • Intent-based Discovery: Dynamically find relevant security actions using natural language intent filtering.
  • Long-polling: Built-in support for waiting on asynchronous connection builds and status changes.
  • Machine-readable Outputs: Global support for --json flags to facilitate programmatic data processing.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*