Openclaw Skills for security-free delivers a lightweight GoPlus security scan workflow for basic vulnerability detection and findings review.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install security-free
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install security-free using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is security-free?
GoPlus Security Scan Free Edition
security-free is an Openclaw Skills package designed to help AI coding agents perform a basic GoPlus-backed security scan, identify common vulnerabilities, and present findings in a structured, reviewable format. It is optimized for personal projects and fast self-audits where developers need immediate visibility into code security issues without heavy setup.
This skill focuses on one-time security scanning, severity-based findings classification, and markdown report output. By using Openclaw Skills, developers can quickly inspect Go source code, review dependency risks, and receive actionable remediation guidance for issues such as SQL injection, command injection, insecure configuration, and hardcoded secrets.
security-free Use Cases
- Running a one-time security scan on a Go project before release
- Reviewing vulnerability findings with severity labels like Critical, High, Medium, Low, and Info
- Inspecting file paths, line numbers, and remediation suggestions for security issues
- Performing lightweight security self-checks for personal or small-team projects
- Generating a Markdown security report for sharing or archival
- Re-scanning after fixes to verify that vulnerabilities are resolved
How security-free Works
- The agent receives an input string, optional configuration options, and an optional callback URL for asynchronous completion.
- The skill validates the environment, ensuring the required LLM/API key and compatible agent runtime are available.
- The GoPlus security scan is executed against the provided code or scan instruction, with the agent using
readandexectools as needed. - The scan engine analyzes code and dependencies, then returns structured vulnerability results grouped by severity.
- The skill formats each finding with a description, affected file path, line number, and fix recommendation.
- A summary of total findings and severity distribution is produced, and the final report is exported in Markdown format.
- The developer reviews the report, applies fixes, and runs a follow-up scan to confirm remediation.
security-free Setup
Prerequisites
- An AI agent runtime that supports SKILL.md workflows
- A valid LLM/API key configured in the environment
- A Go project or Go source tree to scan
Environment configuration
Set the API key before launching your agent session:
export API_KEY=${API_KEY:?please set API_KEY}
Restart the terminal session or open a new one after setting the variable so the agent can read it correctly.
Usage notes
- Ensure the scan target includes Go files, otherwise results may be empty.
- Use the agent chat to provide the scan input and optional options object.
- After fixes, run the skill again to verify remediation.
Example workflow
# 1. Configure your API key
export API_KEY=${API_KEY:?please set API_KEY}
# 2. Open your AI coding agent
# 3. Invoke the security-free skill with your project path or scan instructions
# 4. Review the Markdown report output
Operational limits
- No scheduled scanning or continuous monitoring
- No webhook or Chat ID notifications
- No bulk file-path targeting
- Markdown is the only supported report export format
security-free Data Schema & Taxonomy
Input schema
| Field | Type | Required | Description |
|---|---|---|---|
| input | string | Yes | Scan input data or instructions for the security-free workflow |
| options | object | No | Optional settings such as mode selection and format preferences |
| callback_url | string | No | URL to notify when asynchronous processing completes |
Dependency model
| Dependency | Type | Required | Source |
|---|---|---|---|
| LLM API | API | Yes | Provided by the agent runtime |
| API Key | Environment | Yes | Set via environment variable |
Output taxonomy
The skill organizes results into a simple security reporting model used by Openclaw Skills:
- Scan summary: total vulnerabilities and severity distribution
- Findings detail: vulnerability type, affected file path, line number, and fix recommendation
- Severity levels: Critical, High, Medium, Low, Info
- Report format: Markdown-only export
Supported finding types
- SQL injection
- Command injection
- Path traversal
- Hardcoded secrets
- Insecure encryption and related misconfigurations
Known metadata
slug:security-freename:security-freeversion:1.0.0pricing_tier:freecategory:Security
security-free Advanced Features
- Severity-based vulnerability grouping for fast triage
- Detailed findings with file path, line number, and remediation guidance
- Markdown report generation for easy sharing and archival
- One-time scan flow optimized for quick self-audits in Openclaw Skills
- Flexible agent compatibility across supported AI coding environments
- Optional asynchronous callback support via
callback_url - Tool-driven execution using
readandexecfor code inspection and processing
SKILL.md
Loading
Related Openclaw Skills
Smart Light Controller Free
Openclaw Skills for Smart Light Controller Free delivers local, cloudless command-line control of TP-Link Kasa smart bulbs for power, brightness, HSV color, and white temperature.
feed-to-md-tool-free
Openclaw Skills turns a single RSS or Atom feed into structured Markdown and saves it locally with minimal setup.
Fixed-String Status Responder
A no-op canary skill that returns a deterministic token to confirm Openclaw Skills loading, discovery, and end-to-end execution.
Local Business Live Cycle
Openclaw Skills for local business owners to diagnose shop problems, write short-video and livestream scripts, and turn data into actionable growth plans.
skill-vetter-free
skill-vetter-free is a security-first vetting skill for AI agents that checks source credibility and red flags before installation.
PPT Toolkit Free
Openclaw Skills for PowerPoint creation, editing, template-based generation, and content/visual QA in a lightweight free AI skill.
Featured*
