A comprehensive security toolkit for AI agents to identify code vulnerabilities, insecure dependencies, and hardcoded secrets.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install openclaw-secscan
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install openclaw-secscan using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Security Analysis & Vulnerability Detection?
The Security skill is a robust analysis engine designed to integrate seamlessly into AI-driven development workflows. It provides automated scanning capabilities to detect critical security flaws such as SQL injection, path traversal, and command injection, mapped directly to CWE standards. By leveraging Openclaw Skills, developers can ensure their AI agents are not only writing functional code but also adhering to industry-standard security best practices.
Beyond simple code analysis, this skill monitors project dependencies for known CVEs and performs deep entropy scans to find leaked API keys, AWS credentials, and private certificates. It serves as a frontline defense, providing actionable remediation advice to fix security issues before they reach production.
Security Analysis & Vulnerability Detection Use Cases
- Scanning source code for vulnerabilities during the development phase.
- Identifying outdated or insecure third-party packages in requirements.txt or package.json.
- Preventing accidental credential leaks by detecting secrets in environment files and codebases.
- Automating security audits within CI/CD pipelines for every pull request.
- Providing real-time security remediation advice to AI coding assistants.
How Security Analysis & Vulnerability Detection Works
- The user or AI agent triggers a scan via the unified entry point script.
- The Scanner engine parses the target files or directories using language-specific rules (Python, JavaScript, etc.).
- Dependency checkers cross-reference manifest files against known vulnerability databases.
- Secret detection algorithms search for high-entropy strings and predefined patterns (regex) for API keys.
- The skill aggregates all findings into a structured report, categorizing issues by severity (Critical, Medium, Low).
- Remediation steps are provided for each identified issue to guide the developer through the fix.
Security Analysis & Vulnerability Detection Setup
To integrate this security module into your Openclaw Skills environment, follow these steps:
# Navigate to the security skill directory
cd skills/security
# Run a full scan on your source directory
python3 scripts/main.py scan --dir src/
# Check for dependency vulnerabilities
python3 scripts/main.py deps --requirements requirements.txt
# Scan for leaked secrets across the project
python3 scripts/main.py secrets --dir .
Security Analysis & Vulnerability Detection Data Schema & Taxonomy
The Security skill utilizes a configuration file and a structured rule system to manage analysis parameters:
| Component | Description |
|---|---|
.security.json |
Local configuration for severity thresholds, ignored paths, and custom regex patterns. |
rules/ |
YAML-based definitions for language-specific vulnerability patterns. |
scanner.py |
The core logic engine that processes files against the defined rules. |
results |
Console-based output detailing CWE identifiers, file locations, and fix suggestions. |
Security Analysis & Vulnerability Detection Advanced Features
- Custom pattern matching for company-specific API key formats and internal secrets.
- Severity threshold filtering to focus only on critical risks in high-noise environments.
- Automated CI/CD integration support via GitHub Actions for continuous security monitoring.
- Path exclusion rules to skip test files or third-party vendor directories.
- Detailed CWE mapping for all detected vulnerabilities to facilitate standardized reporting.
SKILL.md
Loading
Related Openclaw Skills
ADB Phone Control
A robust automation skill for controlling Android devices through the Android Debug Bridge using a precision-based observe-locate-act-verify loop.
Proactive Agent
A robust architecture that transforms AI agents from passive followers into persistent, self-improving, and proactive partners that anticipate needs.
Cron Creator
An expert scheduling tool designed to create and manage reliable cron jobs and reminders specifically optimized for Feishu and multi-agent environments.
HK & A-Share Stock Monitor
A comprehensive real-time monitoring and technical analysis system for Hong Kong and A-share stock markets featuring automated price alerts.
Obsidian-Ontology Sync
A bidirectional synchronization tool that transforms human-written Obsidian notes into a machine-queryable ontology graph for advanced knowledge analysis.
Brain Trust Private Board
A dynamic multi-expert collaboration framework for strategic decision-making, red-teaming, and complex problem analysis.
Featured*
