An AI-native security orchestration platform that uses Claude AI to perform deep application security scans, threat modeling, and continuous monitoring.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install securevibes-scanner
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install securevibes-scanner using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is SecureVibes Scanner?
SecureVibes Scanner is a high-performance security tool designed to integrate seamlessly with Openclaw Skills to provide automated, intelligence-driven application security. By leveraging a multi-subagent pipeline powered by Claude AI, it goes beyond simple pattern matching to understand code context, identify complex logic flaws, and generate architectural threat models. It is built for developers who need to maintain a strong security posture without manual auditing overhead.
This skill supports both comprehensive one-shot audits and efficient incremental scanning. When used as part of your Openclaw Skills library, it allows autonomous agents to monitor repositories for new vulnerabilities in real-time. Whether you are performing a deep dive into a legacy codebase or setting up a continuous security pipeline, SecureVibes Scanner provides the structured data and actionable insights required for modern DevSecOps.
SecureVibes Scanner Use Cases
- Running full security audits on local codebases to identify vulnerabilities.
- Generating STRIDE-based threat models for new project architectures.
- Setting up continuous security monitoring via cron-driven incremental scans.
- Performing dynamic application security testing (DAST) against running services.
- Reviewing specific pull requests or recent commits for introduced security risks.
How SecureVibes Scanner Works
- The scanner initializes by assessing the target repository's architecture and mapping the attack surface.
- It performs a threat modeling phase using STRIDE methodology to identify potential attack vectors.
- An AI-powered code review subagent scans the source code to detect specific security vulnerabilities.
- If enabled, a DAST subagent executes network-level tests against a running target URL to validate findings.
- The results are consolidated into a human-readable markdown report and structured JSON data for further automation.
- For continuous integration, the tool tracks commit anchors to only process new changes during subsequent runs.
SecureVibes Scanner Setup
To get started with SecureVibes Scanner for Openclaw Skills, install the CLI and configure your environment:
# Install the scanner utility
pipx install securevibes
# Set up authentication
export ANTHROPIC_API_KEY=your-api-key
# Run an initial full scan to bootstrap the security state
bash scripts/scan.sh /path/to/your/repo --force
For autonomous usage, ensure the agent has filesystem access to the repository and the .securevibes/ configuration directory.
SecureVibes Scanner Data Schema & Taxonomy
The skill organizes its findings within a .securevibes/ directory at the root of the scanned repository:
| File Name | Format | Purpose |
|---|---|---|
SECURITY.md |
Markdown | Architecture assessment and attack surface map. |
THREAT_MODEL.json |
JSON | Structured STRIDE threat analysis. |
VULNERABILITIES.json |
JSON | List of detected vulnerabilities with severity levels. |
scan_report.md |
Markdown | Human-readable summary of all scan findings. |
incremental_state.json |
JSON | Metadata used to track the last scanned commit. |
SecureVibes Scanner Advanced Features
- Multi-subagent pipeline for specialized tasks like threat modeling and DAST.
- Incremental scanning mode that tracks git SHAs to minimize token consumption and processing time.
- Customizable severity thresholds to filter out low-priority findings.
- Atomic state management and file locking to prevent race conditions during cron execution.
- Integrated rewrite policies for handling git force-pushes in automated environments.
SKILL.md
Loading
Related Openclaw Skills
QMD Search
A local indexing tool that uses BM25 and vector embeddings to search markdown collections efficiently while minimizing token usage.
Wheels Router Transit Planner
A high-performance transit routing skill for AI agents providing global trip planning with deep integration for Hong Kong transportation.
Jina DeepSearch
A high-performance deep search skill for AI agents to retrieve grounded information using Jina AI's advanced search models.
Training Manager
A comprehensive workspace orchestration tool for scaffolding, maintaining, and optimizing the training lifecycle of AI agents.
Hostex API Integration
A comprehensive Node.js integration for the Hostex OpenAPI to manage vacation rental properties, reservations, and guest communication.
OpenAnt CLI Skill
A CLI-based interface for managing Human-Agent collaboration, task bounties, and decentralized teams.
METADATA
Featured*
