Automate software composition analysis and open-source vulnerability management through a unified AI-driven interface.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install whitesource
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install whitesource using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is WhiteSource (Mend)?
This skill provides a robust integration with WhiteSource (now Mend), a leading software composition analysis tool designed to help developers manage open source security and compliance risks. By utilizing Openclaw Skills, users can automate the process of identifying and remediating vulnerabilities in their software components without managing complex authentication logic. The integration bridges the gap between security data and AI-driven automation, enabling teams to maintain high security standards across their entire codebase through the Membrane platform.
WhiteSource (Mend) Use Cases
- Automated identification and remediation of security vulnerabilities in open-source libraries.
- Continuous monitoring of open-source license compliance for enterprise projects.
- Programmatic assignment of security alerts to specific team members via AI agents.
- Generating comprehensive inventory and vulnerability reports for security audits using Openclaw Skills.
How WhiteSource (Mend) Works
- Install the Membrane CLI to provide the necessary environment for the skill to operate.
- Authenticate the AI agent using a tenant-based login to secure communication with the WhiteSource API.
- Establish a connection to the WhiteSource domain, allowing Membrane to handle credential management and refresh tokens.
- Use natural language intent to search for specific WhiteSource actions like alert tracking or project management.
- Execute actions or send proxy requests to the WhiteSource API with automatic header injection and error handling.
WhiteSource (Mend) Setup
First, install the Membrane CLI globally:
npm install -g @membranehq/cli@latest
Log in and specify your agent type to optimize the integration for Openclaw Skills:
membrane login --tenant --clientName=openclaw
Create a connection to your WhiteSource instance:
membrane connection ensure "https://www.whitesourcesoftware.com" --json
WhiteSource (Mend) Data Schema & Taxonomy
The skill manages several key entities within the WhiteSource ecosystem, organized as follows:
| Entity | Description |
|---|---|
| Alert | Security or license policy violations identified in code |
| Project/Product | Hierarchical containers for organizing software components |
| Inventory | A full registry of all open-source libraries in use |
| Vulnerability | Detailed security flaw data including remediation steps |
| License | Legal compliance data for open-source dependencies |
| Remediation | Instructions and state tracking for fixing identified risks |
WhiteSource (Mend) Advanced Features
- Server-side credential management that eliminates the need to store local API keys or secrets.
- Intent-based action discovery which allows AI agents to find the correct API endpoint using natural language descriptions.
- Transparent proxy request layer that automatically handles base URLs and authentication for custom WhiteSource API endpoints.
- Long-polling connection states to ensure Openclaw Skills workflows only proceed when the integration is fully authorized and ready.
SKILL.md
Loading
Related Openclaw Skills
Wiza
A powerful integration for finding contact information and managing LinkedIn prospecting data via AI agents.
Yugabyte
A robust integration for managing YugabyteDB distributed SQL clusters and automating data workflows via AI agents.
YoPrint
YoPrint integration for Openclaw Skills enables automated management of print shop orders, customers, and production workflows through a secure API proxy.
Zendesk Guide Integration
A professional-grade integration for managing Zendesk Guide knowledge bases and self-service content via automated AI agent workflows.
Worksnaps
A robust integration skill that enables AI agents to manage time tracking, activity logs, and remote team data through the Worksnaps platform.
Workiz
A powerful field service management skill for Openclaw Skills that automates Workiz data handling, scheduling, and customer communication.
Featured*
