A powerful integration for AI agents to interact with Proofpoint's email security and threat intelligence platform.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install proofpoint
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install proofpoint using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Proofpoint?
The Proofpoint skill for Openclaw Skills enables AI coding agents to seamlessly manage cybersecurity records, threat data, and automated workflows. By leveraging the Membrane infrastructure, this skill provides a robust bridge to Proofpoint's ecosystem, covering email message analysis, user protection, and campaign tracking without the overhead of manual authentication management.
This integration is essential for developers building security-aware agents that need to protect against phishing, malware, and email-borne threats. It simplifies the developer experience by providing high-level actions and a secure proxy for the Proofpoint API, ensuring that sensitive organizational data remains safeguarded while enabling powerful automation.
Proofpoint Use Cases
- Automating threat intelligence gathering from the Proofpoint Insight Dashboard.
- Analyzing suspicious email attachments and URLs within an AI-driven security workflow.
- Tracking and managing cybersecurity campaigns to protect organizational users.
- Integrating email security status checks into custom DevOps or communication pipelines.
- Researching phishing attempts and malware patterns using Openclaw Skills and Proofpoint data.
How Proofpoint Works
- The AI agent initializes the skill using the Membrane CLI, ensuring a secure environment for command execution.
- Authentication is handled through a tenant-based login flow where Membrane manages OAuth tokens or API keys server-side.
- A connection is established to the Proofpoint domain, which the agent monitors until the state reaches READY.
- The agent uses natural language intent strings to search for specific Proofpoint actions like retrieving threat logs or user details.
- Actions are executed via the CLI, with Membrane automatically injecting the necessary credentials and handling API pagination.
- For custom requirements, the agent sends proxied requests directly to Proofpoint endpoints through the Membrane tunnel.
Proofpoint Setup
First, install the Membrane CLI to enable Openclaw Skills functionality:
npm install -g @membranehq/cli@latest
Authenticate your agent (replace <agentType> with openclaw):
membrane login --tenant --clientName=openclaw
Create a connection to the Proofpoint API:
membrane connection ensure "https://www.proofpoint.com/" --json
If the connection is building, wait for it to be ready:
npx @membranehq/cli connection get <id> --wait --json
Proofpoint Data Schema & Taxonomy
The skill organizes Proofpoint data into logical entities and provides structured JSON outputs for all operations.
| Entity | Description |
|---|---|
| Threat Insight | Data related to email security threats and incidents. |
| Campaign | Information regarding identified phishing or malware campaigns. |
| User | Metadata and protection status for organizational users. |
| Attachment/URL | Specific artifacts analyzed for malicious content. |
All actions return a JSON object containing an output field with the requested data and metadata.
Proofpoint Advanced Features
- Multi-agent support: Optimized for various harnesses including openclaw, claude, and windsurf.
- Automatic Credential Refresh: Membrane manages token lifecycles server-side, eliminating the need for local secret storage.
- Natural Language Action Discovery: Search for capabilities using intent-based queries rather than hardcoded IDs.
- Transparent API Proxy: Full access to the Proofpoint API with automatic header injection and base URL normalization.
- Long-polling Connection Management: Built-in support for waiting on asynchronous connection provisioning.
SKILL.md
Loading
Related Openclaw Skills
Ready2order
A comprehensive integration for managing Ready2order POS data, inventory, and sales workflows via AI-driven automation.
StrongDM
A secure integration for managing infrastructure access, roles, and audit logs using StrongDM within the Openclaw Skills ecosystem.
Maximizer
A powerful CRM integration that allows AI agents to manage leads, opportunities, and customer records through Openclaw Skills.
Parser Expert
A sophisticated integration that enables AI agents to extract structured data from unstructured text using Parser Expert's rule-based engine.
Pangea
A comprehensive security services integration that allows AI agents to manage audit logs, secrets, and threat intelligence through a unified API.
SendOwl
A comprehensive integration for managing SendOwl digital products, orders, and automated marketing workflows through AI agents.
Featured*
