Skip to main content

picoclaw-security-guardian

Enhances Picoclaw's security posture with configuration drift detection and supply-chain verification guidance.

Install this skill

or
91/100

Security score

The picoclaw-security-guardian skill was audited on May 25, 2026 and we found 5 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 26

Template literal with variable interpolation in command context

SourceSKILL.md
26```bash
low line 126

Access to hidden dotfiles in home directory

SourceSKILL.md
126node scripts/check_advisories.mjs --feed ~/.picoclaw/security/clawsec/feed.json --state ~/.picoclaw/security/clawsec/feed-verification-state.json
low line 137

Access to hidden dotfiles in home directory

SourceSKILL.md
137node scripts/generate_profile.mjs --output ~/.picoclaw/security/clawsec/current-profile.json
low line 143

Access to hidden dotfiles in home directory

SourceSKILL.md
143node scripts/check_drift.mjs --baseline ~/.picoclaw/security/clawsec/baseline-profile.json --current ~/.picoclaw/security/clawsec/current-profile.json --fail-on critical
low line 5

External URL reference

SourceSKILL.md
5homepage: https://clawsec.prompt.security
Scanned on May 25, 2026
View Security Dashboard
Installation guide →