A proactive security monitoring agent that identifies vulnerabilities in Docker images and software dependencies while providing real-time CVE alerting.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install threat-radar
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install threat-radar using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is threat-radar?
threat-radar is a high-performance security posture monitoring tool designed to keep your infrastructure safe within the ecosystem of Openclaw Skills. It specializes in continuous surveillance of running services, Docker containers, and software dependency lockfiles to detect known vulnerabilities (CVEs) before they can be exploited. By operating entirely locally with cached public CVE feeds from NVD and GitHub, it provides a privacy-focused security solution that does not require external SaaS subscriptions.
This skill acts as a dedicated security officer for your environment, performing deep audits of SSL/TLS configurations, local network port exposure, and the security settings of your agent configuration. With built-in support for multiple notification channels, threat-radar ensures that critical security threats are communicated immediately while providing structured weekly digests for routine maintenance and trend analysis.
threat-radar Use Cases
- Automatically auditing Docker images and application dependencies (npm, pip, cargo) for known security vulnerabilities.
- Detecting accidentally exposed services or open ports on your local and public network interfaces.
- Monitoring SSL/TLS certificate validity and configuration grades to prevent encryption-related downtime or weaknesses.
- Tracking security posture trends to visualize improvements in your overall infrastructure health.
- Receiving immediate high-priority alerts for critical CVEs affecting your specific software versions.
How threat-radar Works
- Intelligence Initialization: The skill downloads and indexes the latest CVE databases from the National Vulnerability Database and GitHub Advisories for offline matching.
- Multi-Vector Scanning: It executes seven distinct security checks in parallel, including container analysis, dependency parsing, and non-invasive network port discovery.
- Vulnerability Matching: Detected software versions are compared against the local security intelligence database to identify specific CVEs and their severities.
- Alert Dispatching: Findings are filtered through a severity-based logic engine, sending immediate notifications or scheduled digests based on user-defined thresholds.
- Remediation & Logging: The skill generates actionable fix suggestions and stores results in a local SQLite database for historical reporting and audit trails.
threat-radar Setup
Install the skill via the hub to integrate it with your Openclaw Skills environment:
clawhub install threat-radar
Initialize the CVE database and perform an initial baseline scan:
threat-radar init
Enable automated daily monitoring and weekly reporting:
threat-radar cron-install
threat-radar Data Schema & Taxonomy
The threat-radar skill maintains a structured data hierarchy within the monitoring workspace:
| File | Purpose |
|---|---|
config.json |
Configuration for scan paths, alert levels, and network CIDRs. |
threat-radar.db |
SQLite storage for scan history, tracked software versions, and CVE metadata. |
reports/ |
Archive of generated Markdown and JSON security audits. |
threat-radar.log |
Technical log for auditing scan performance and errors. |
The schema tracks detailed metrics including Security Score, Critical/High/Medium/Low counts, and average remediation times.
threat-radar Advanced Features
- Severity-Based Alerting: Customizable notification logic that dispatches critical threats immediately while suppressing low-priority noise.
- Remediation Automation: Integrated fix suggestions with the ability to trigger dependency updates via the remediation command.
- Trend Analysis: Visualizes security score fluctuations over time to identify declining posture or improved compliance.
- Cross-Skill Integration: Feeds security events into infra-watchdog and correlates findings with ops-journal for incident management.
- Privacy-First Scanning: All port scanning and dependency analysis remain within your private network, with no external data transmission except for CVE feed updates.
SKILL.md
Loading
Related Openclaw Skills
Smart Web Scraper
A robust data extraction tool designed to turn web pages into structured JSON, CSV, or Markdown datasets using CSS selectors and auto-detection.
Smart Cron
A natural language cron scheduler that allows users to automate tasks using simple English commands instead of complex cron syntax.
Service Watchdog
A lightweight service and endpoint monitoring utility for tracking the health of self-hosted infrastructure and SSL certificates.
Passive Income Tracker
A unified CLI dashboard to track daily earnings, payouts, and node uptime across multiple bandwidth-sharing and crypto-passive income applications.
Web3 Grant Tracker
A comprehensive monitoring tool for Web3 grant rounds, DAO funding, and quadratic funding matching estimates.
WhatsApp FAQ Bot
A streamlined tool for building and querying automated FAQ knowledge bases from markdown files for intelligent messaging bots.
Featured*
