clawsec-suite — Claude Code skill: what it does, install
This skill monitors ClawSec advisories, verifies signatures, and checks installed skills for affected entries. Use it when security checks need approval gates.
npx skills add prompt-security/clawsec --skill clawsec-suite -a claude-codeWhat clawsec-suite does
clawsec-suite monitors a signed advisory feed, tracks which entries are new, and compares affected skills with the skills installed locally. It can recommend removing a malicious skill, while install and removal overrides still require explicit user approval.
The package includes trusted advisory data, hook setup scripts, a guarded installer, and runtime discovery for additional skills. Its OpenClaw hook scans on agent:bootstrap and /new; a separate script can create an openclaw cron job with a 6h interval. The runtime requires node, npx, openclaw, curl, jq, shasum, openssl, and unzip. It fetches signed advisory artifacts and catalog metadata over the network, so check network access and trust settings before enabling automation.
What it helps with
- monitor new ClawSec advisories
- match affected skills against local installations
- ask for approval before removing a risky skill
- install add-on skills through a guarded script
- enable advisory checks with an OpenClaw hook
Example prompts for the agent
- Check new ClawSec advisories and compare them with the installed skills.
- Show which local skills are affected and ask for approval before removing any of them.
- Set up the OpenClaw advisory hook and prepare a periodic check with
openclaw cron.
How to install clawsec-suite
1Skills CLI (Vercel)
npx skills add prompt-security/clawsec --skill clawsec-suite -a claude-code2Manually: put the files in place
~/.claude/skills/clawsec-suite/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/clawsec-suite/
1Skills CLI (Vercel)
npx skills add prompt-security/clawsec --skill clawsec-suite -a codex2Manually: put the files in place
.agents/skills/clawsec-suite/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add prompt-security/clawsec --skill clawsec-suite -a cursor2Manually: put the files in place
.cursor/skills/clawsec-suite/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install prompt-security/clawsec clawsec-suite2Manually: put the files in place
.github/skills/clawsec-suite/SKILL.md1Skills CLI (Vercel)
npx skills add prompt-security/clawsec --skill clawsec-suite -a gemini-cli2Platform CLI
gemini skills install https://github.com/prompt-security/clawsec --path skills/clawsec-suiteManually: put the files in place
.devin/skills/clawsec-suite/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add prompt-security/clawsec --skill clawsec-suite -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about clawsec-suite
How do I install clawsec-suite in Claude Code?
Run npx skills add prompt-security/clawsec --skill clawsec-suite -a claude-code, run the same command again, then check ~/.claude/skills/clawsec-suite/SKILL.md.
What does clawsec-suite do?
The skill monitors a signed advisory feed, tracks new entries, and checks whether installed skills are affected. Removing a risky skill or overriding an install requires user approval.
What does clawsec-suite require?
It requires node, npx, openclaw, curl, jq, shasum, openssl, and unzip. Network access is also used for signed advisories and catalog metadata.
