Skip to main content

clawsec-scanner

Automates vulnerability scanning for agent platforms, integrating dependency checks, SAST, and DAST for comprehensive security assessments.

Install this skill

or
47/100

Security score

The clawsec-scanner skill was audited on May 14, 2026 and we found 13 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 287

Direct command execution function call

SourceSKILL.md
287const proc = spawn('npm', ['audit', '--json'], {
high line 407

Direct command execution function call

SourceSKILL.md
407const proc = spawn('semgrep', [
medium line 121

Template literal with variable interpolation in command context

SourceSKILL.md
121```bash
medium line 188

Template literal with variable interpolation in command context

SourceSKILL.md
188```bash
medium line 211

Template literal with variable interpolation in command context

SourceSKILL.md
211```bash
low line 284

Node child_process module reference

SourceSKILL.md
284import { spawn } from 'node:child_process';
low line 5

External URL reference

SourceSKILL.md
5homepage: https://clawsec.prompt.security
low line 491

External URL reference

SourceSKILL.md
491- **ClawSec Homepage**: https://clawsec.prompt.security
low line 492

External URL reference

SourceSKILL.md
492- **Documentation**: https://clawsec.prompt.security/scanner
low line 494

External URL reference

SourceSKILL.md
494- **OSV API Docs**: https://osv.dev/docs/
low line 495

External URL reference

SourceSKILL.md
495- **NVD API Docs**: https://nvd.nist.gov/developers/vulnerabilities
low line 496

External URL reference

SourceSKILL.md
496- **Semgrep Registry**: https://semgrep.dev/explore
low line 497

External URL reference

SourceSKILL.md
497- **Bandit Documentation**: https://bandit.readthedocs.io/
Scanned on May 14, 2026
View Security Dashboard
Installation guide →
GitHub Stars 1.0K
Rate this skill
Categorydevelopment
UpdatedMay 31, 2026
prompt-security/clawsec