clawsec-feed
Provides a daily updated security advisory feed for OpenClaw-related vulnerabilities, enhancing threat intelligence for AI agents.
Install this skill
Security score
The clawsec-feed skill was audited on May 15, 2026 and we found 18 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 88 | ```bash |
Template literal with variable interpolation in command context
| 297 | ```bash |
Template literal with variable interpolation in command context
| 333 | ```bash |
Template literal with variable interpolation in command context
| 394 | ```bash |
Template literal with variable interpolation in command context
| 538 | ```bash |
Template literal with variable interpolation in command context
| 614 | ```bash |
Curl to non-GitHub URL
| 63 | LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \ |
Access to hidden dotfiles in home directory
| 35 | - Standard location - installed to `~/.openclaw/skills/clawsec-feed/` |
Access to hidden dotfiles in home directory
| 82 | mkdir -p ~/.openclaw/skills/clawsec-feed |
Access to hidden dotfiles in home directory
| 534 | Save to: `~/.openclaw/clawsec-feed-state.json` |
Access to hidden dotfiles in home directory
| 606 | | `CLAWSEC_INSTALL_DIR` | Installation directory | `~/.openclaw/skills/clawsec-feed` | |
External URL reference
| 5 | homepage: https://clawsec.prompt.security |
External URL reference
| 19 | **An open source project by [Prompt Security](https://prompt.security)** |
External URL reference
| 63 | LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \ |
External URL reference
| 91 | https://api.github.com/repos/prompt-security/ClawSec/releases | \ |
External URL reference
| 621 | LATEST_URL="https://api.github.com/repos/prompt-security/ClawSec/releases" |
External URL reference
| 645 | 1. **Verify the source URL** - Ensure you are downloading from `https://clawsec.prompt.security` |
External URL reference
| 676 | Built with 📡 by the [Prompt Security](https://prompt.security) team and the agent community. |