clawsec-feed
Provides a daily updated security advisory feed for OpenClaw-related vulnerabilities, enhancing threat intelligence for AI agents.
Install this skill
Security score
The clawsec-feed skill was audited on May 12, 2026 and we found 18 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 97 | ```bash |
Template literal with variable interpolation in command context
| 306 | ```bash |
Template literal with variable interpolation in command context
| 344 | ```bash |
Template literal with variable interpolation in command context
| 441 | ```bash |
Template literal with variable interpolation in command context
| 639 | ```bash |
Template literal with variable interpolation in command context
| 715 | ```bash |
Curl to non-GitHub URL
| 72 | LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \ |
Access to hidden dotfiles in home directory
| 42 | - Standard location - installed to `~/.openclaw/skills/clawsec-feed/` |
Access to hidden dotfiles in home directory
| 91 | mkdir -p ~/.openclaw/skills/clawsec-feed |
Access to hidden dotfiles in home directory
| 635 | Save to: `~/.openclaw/clawsec-feed-state.json` |
Access to hidden dotfiles in home directory
| 707 | | `CLAWSEC_INSTALL_DIR` | Installation directory | `~/.openclaw/skills/clawsec-feed` | |
External URL reference
| 5 | homepage: https://clawsec.prompt.security |
External URL reference
| 26 | **An open source project by [Prompt Security](https://prompt.security)** |
External URL reference
| 72 | LATEST_TAG=$(curl -sSL https://api.github.com/repos/prompt-security/ClawSec/releases | \ |
External URL reference
| 100 | https://api.github.com/repos/prompt-security/ClawSec/releases | \ |
External URL reference
| 722 | LATEST_URL="https://api.github.com/repos/prompt-security/ClawSec/releases" |
External URL reference
| 746 | 1. **Verify the source URL** - Ensure you are downloading from `https://clawsec.prompt.security` |
External URL reference
| 777 | Built with 📡 by the [Prompt Security](https://prompt.security) team and the agent community. |