clawsecure-openclaw-security - Free OpenClaw security scanner. 3,000+ agents audi

项目说明

ClawSecure — OpenClaw Security Scanner & Audit Platform

![ClawSecure — #2 Product of the Day on Product Hunt]()

![License: MIT]()
![Website]()
![Agents Audited]()
![OWASP ASI]()
![Free Tools]()

ClawSecure's Global Threat Monitor

![ClawSecure Global Threat Monitor]()

> Launch Interacti Monitor -- 1.6 million packages install across the OpenClaw ecosystem every week. A new agent deploys every 2.7 seconds. 41% ship dangerous. Watch the global threat surface grow in real time.

🛡️ ClawSecure is the independent integrity layer for the OpenClaw ecosystem — a free OpenClaw security scanner and audit platform purpose-built for AI agent skills and workflows. We' 3,000+ skills from the community-curated awesome-openclaw-skills list and the openclaw/skills repository, co all 10 OWASP ASI Top 10 security categories with our proprietary 3-Layer Audit Protocol.

🔧 Free OpenClaw De Tools by ClawSecure: We also ship free, open-source tools for the OpenClaw ecosystem. ShutUp Tabs -- auto-closes the diff tabs Claude Code force-opens on every file edit. Works in VS Code, Cursor, Windsurf, Antigravity, and all VS Code forks. Railgun -- deterministic agent orchestration that won't run up a $47K bill. YAML pipelines with runtime limits, concurrency caps, and per-step obser. Claude Timestamps -- li session transcripts for Claude Code in VS Code, across all workspaces. New tools ship weekly. See all free tools.

---

Table of Contents

---

The OpenClaw Security Problem

OpenClaw is the fastest-growing open-source software in history and the leading AI agent framework, with 332,000+ GitHub stars, 1.65M npm downloads per week, and 300-500K acti. That growth has made it a high-value target. ClawSecure's audit of the most popular skills found that 41% contain at least one security -- ranging from credential har to unauthorized network calls.

The threats facing OpenClaw users go beyond traditional malware. Palo Alto Networks (2026) identified the Lethal Trifecta — the con of private data access, untrusted content exposure, and external communication capabilities — as the defining risk pattern for AI agents. OpenClaw exhibits all three by design.

Key OpenClaw patterns ClawSecure detects include:

Traditional malware scanners miss these threats because they lack context about how OpenClaw agents operate. An AI skill checker needs to understand that clipboard access, shell execution, and screenshot capture are standard agent capabilities — not automatic red flags.

---

OpenClaw Security Audit Features

ClawSecure provides the only complete security solution co all 10 OWASP ASI categories for OpenClaw agents. Every audit runs through our proprietary 3-Layer Audit Protocol:

<!-- TODO: Replace with production architecture diagram from Graphics Chat -->
!ClawSecure 3-Layer Audit Protocol architecture diagram for OpenClaw security — showing Layer 1 proprietary AI agent threat intelligence, Layer 2 ad static and beha analysis, and Layer 3 supply chain security scanning across the OpenClaw ecosystem

Layer 1 — Proprietary Threat Intelligence
ClawSecure's proprietary engine analyzes skills against 55+ OpenClaw-specific threat patterns, including ClawHa, ReDoS , and Context-Aware Intelligence that differentiates real threats from normal agent capabilities.

Layer 2 — Ad Static & Beha Analysis
Deep code analysis examining execution patterns, data flow, permission requests, and beha indicators across skill source code, metadata, and bundled scripts.

Layer 3 — Supply Chain Security
Comprehensi auditing across npm, PyPI, and other package ecosystems, cross-referencing known CVEs and databases to catch poisoned dependencies before they execute.

Full Capability List

| Capability | Description |
|---|---|
| 3-Layer Audit Protocol | Proprietary threat intelligence, ad static and beha code analysis, and supply chain dependency scanning working in concert — the only OpenClaw security audit co all three attack surfaces |
| OWASP ASI Top 10 Scanner | Comprehensi security co across all 10 agentic security categories defined by the OWASP Agentic Security Initiative — from agent goal hijack and tool misuse to data exfiltration and agent persistence |
| Watchtower 24/7 Monitoring | Automated hash-drift detection with instant re-audit on code changes — 3,000+ OpenClaw skills monitored continuously for post-installation tampering, sleeper acti, and unauthorized modifications |
| Security Clearance API | Programmatic real-time integrity for de and platforms — any OpenClaw agent's security status, score, and hash match before granting access to sensitive data or tools |
| Context-Aware Intelligence | Ecosystem-specific threat classification that differentiates real threats from standard OpenClaw agent capabilities — eliminates false positives that generic malware scanners produce on legitimate AI agent tools |
| Anti-Sleeper Agent Detection | Continuous OpenClaw security monitoring catches post-installation code modifications — detects skills that pass initial inspection but recei updates after deployment |
| ClawHa | Purpose-built detection for the ClawHa family — identifies C2 callback patterns, credential har routines, and malicious domain connections targeting OpenClaw users |
| AI Skill Checker | 55+ threat patterns purpose-built for AI agent skill analysis — including prompt injection, eval() abuse, base64 obfuscation, data exfiltration, and ReDoS |
| Agent Registry | Public searchable directory of 3,000+ audited OpenClaw agents with category filtering, score ranges, and featured sections — skills scoring 80+ earn the ClawSecure badge |
| Free Web-Based Scanning | No installation required — paste any ClawHub skill URL, GitHub link, or skill name, or upload a zip file and get a full OpenClaw Security Audit Report in under 30 seconds |
| Pre-Installation | Scan any OpenClaw skill before installing it — security status via the web scanner, Security Clearance API, or Agent Registry before granting agent access to your system |
| C & Permission Scoring | C detection, config.json permission analysis, and risk scoring for OpenClaw skill configuration files — catches dangerous permission escalation patterns in AI agent setups |
| SOUL.md & MEMORY.md Security | Analyzes OpenClaw agent identity and memory configuration files for prompt injection, unauthorized instruction o, and persistence manipulation attempts |
| Supply Chain Scanning | Full npm and PyPI dependency tree scanning against C — every package checked for known , unpinned flagged, poisoned dependencies detected across the OpenClaw ecosystem |
| SHA-256 Tamper Detection | Cryptographic content hashing across all tracked skills — enables hash-match through the Security Clearance API and powers Watchtower integrity monitoring for OpenClaw security |
| Shareable Security Audit Reports | Public report pages for every scanned skill with unique URLs — share OpenClaw security audit results with teams, embed in documentation, or link from skill READMEs for transparency |
| 3,000+ Curated Audit Database | Skills audited from the community-curated awesome-openclaw-skills list and the openclaw/skills repository — the largest public security analysis of the OpenClaw ecosystem |

---

Quick Start — Scan an OpenClaw Skill

Option 1: Scan via the web interface

Visit the OpenClaw security scanner and paste any ClawHub skill URL or upload a skill zip file. Results are delivered in seconds as a full Security Audit Report.

<!-- TODO: Replace with production scan result screenshot from Graphics Chat -->
!ClawSecure OpenClaw Security Audit Report example showing AI agent scan results with security score, OWASP ASI category findings, and AI skill checker threat detection across all 10 security categories

Option 2: Use the Security Clearance API

For programmatic OpenClaw security automation, integrate the Security Clearance API into your workflow to agent integrity before granting access to sensitive data or actions. See the full API documentation for details.

Option 3: Browse the Registry

Explore 3,000+ audited OpenClaw agents in the Agent Registry. Filter by category, security score, or status to find trusted skills for your workflows.

---

OpenClaw Security Clearance API

ClawSecure offers a free Security Clearance API that returns the security for a named skill. Its current contract (request fields, statuses, errors and rate limits) is published by the API itself: curl -H 'User-Agent: your-app-name/1.0' (send a User-Agent that names your application). See docs/API.md.

---

OWASP ASI Top 10 Co for OpenClaw

ClawSecure provides comprehensi across all 10 categories of the OWASP Agentic Security Initiative (ASI) Top 10 — the emerging security standard for AI agent systems.

<!-- TODO: Replace with production OWASP ASI from Graphics Chat -->
!ClawSecure OWASP ASI Top 10 co grid for OpenClaw security — all 10 agentic security categories covered including agent goal hijack, tool misuse, supply chain attacks, unsafe code execution, rogue agents, data exfiltration, inter-agent communication, cascading failures, sensitive data exposure, and agent persistence

| # | OWASP ASI Category | ClawSecure Co |
|---|---|---|
| ASI-01 | Agent Goal Hijack | Prompt injection detection in skill metadata, SKILL.md files, and bundled scripts |
| ASI-02 | Tool Misuse | Permission analysis and capability auditing for system-level tool access |
| ASI-03 | Supply Chain Attacks | Layer 3 dependency scanning across npm, PyPI, and bundled packages |
| ASI-04 | Unsafe Code Execution | Static analysis of shell commands, e, and code generation |
| ASI-05 | Rogue Agents | Beha fingerprinting and intent classification Intelligence |
| ASI-06 | Data Exfiltration | Network call analysis detecting unauthorized data transmission patterns |
| ASI-07 | Inter-Agent Communication | Workflow handshake analysis for multi-agent swarm security |
| ASI-08 | Cascading Failures | Dependency chain analysis and supply chain cascade pre |
| ASI-09 | Sensitive Data Exposure | Credential and secret detection in config files, en , and memory |
| ASI-10 | Agent Persistence | Watchtower hash-drift monitoring for post-installation integrity |

For a detailed explanation of each category and how ClawSecure maps findings to the OWASP ASI framework, see docs/OWASP-ASI.md. For the complete guide, read OWASP ASI Top 10 Explained for OpenClaw Users on our blog.

---

Why ClawSecure for OpenClaw Security

Generic scanners don't understand OpenClaw. Traditional malware scanners flag legitimate agent tools as suspicious because they lack ecosystem context. A clipboard-access permission that's standard for an OpenClaw productivity skill gets flagged as "potentially malicious" by generic scanners — creating noise that drowns out real threats.

ClawSecure's Context-Aware Intelligence understands the OpenClaw ecosystem and differentiates real threats from normal agent capabilities. When we audited OpenClaw's own peekaboo skill, generic scanners flagged it as suspicious. ClawSecure gave it a 95 (Safe) — because we understand that system-le like clipboard access and shell execution are standard for any useful OpenClaw agent.

Static scans aren't enough. A skill that passes inspection today can receive a malicious update tomorrow. ClawSecure's Watchtower monitors all 3,000+ tracked skills 24/7 and automatically re-audits any skill whose code changes. Within 24 hours of enabling Watchtower, we detected 35 skills with modified code — and 22.9% of all tracked skills ha at least one hash change since initial auditing.

No other tool covers e. ClawSecure is the only OpenClaw audit tool deli 10/10 OWASP ASI co, real-time integrity monitoring, runtime via the Security Clearance API, and an AI skill checker with 55+ threat patterns purpose-built for the agentic era.

---

OpenClaw Security Research and Reports

---

Contributing to OpenClaw Security

We welcome contributions from the OpenClaw community. See CONTRIBUTING.md for details on:

For security disclosures related to ClawSecure itself, see SECURITY.md.

---

🔧 Free De Tools by ClawSecure

ClawSecure builds the most secure AI agent de tools on the market. Beyond the security platform, we ship free, open-source tools that fix the e annoyances of working with AI agents, whether you are coding, automating workflows, or building your agent operating system. Every tool is MIT-licensed, free forever, and built because we work with AI agents every day and got tired of the same problems you have.

| Tool | What It Does | Install |
|------|-------------|---------|
| ShutUp Tabs | You know how Claude Code opens a new diff tab every single time it edits a file? And then opens the file itself in another tab? And suddenly you have 40 tabs and can't find anything? ShutUp Tabs detects those AI agent tabs and auto-closes them after a safe delay so your write operations complete first. Works in VS Code, Cursor, Windsurf, Google Antigravity, Roo Code, Cline, Kilo Code, and every VS Code fork. | VS Code Marketplace / Open VSX |
| Railgun | Two AI agents ran up a $47,000 bill while e thought they were working. 88% of agent pilots never make it to production. The problem? Agents impro the workflow. Railgun locks the sequence down in a YAML file. Each agent does its job, passes output to the next step, and nobody improvises. Cheaper (fresh context per step, no window bloat), reliable (deterministic execution order), and fixable (you can see exactly what each step received and produced). | GitHub |
| Claude Timestamps | The Claude Code VS Code extension does not show timestamps on any message. The browser and desktop apps do. Claude Timestamps fills that gap by reading Claude Code's session files directly and displaying the full con with exact timestamps in a sidebar panel. Works across all workspaces automatically. | VS Code Marketplace / Open VSX |

See all free tools, detailed descriptions, and install instructions at openclaw-de. New tools ship weekly.

---

About ClawSecure

ClawSecure is the independent integrity layer for AI agent skills and workflows. ClawSecure builds the most secure AI agent de tools on the market, pro the security infrastructure the OpenClaw ecosystem needs to scale safely. With 3,000+ skills audited, comprehensi ASI Top 10 co, AI-powered runtime monitoring, and 24/7 Watchtower monitoring, ClawSecure delivers the audit depth and runtime that generic scanners cannot.

Founded by J.D. Salbego — 2x exited founder with 10+ years building trust infrastructure for emerging technology ecosystems.

🌐 clawsecure.ai · 🐦 · 📧

---

License

This project is licensed under the MIT License.

项目信息

开发语言：HTML

Star 数：37

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Free OpenClaw security scanner. 3,000+ agents audited. 3-Layer Audit Protocol. OWASP ASI 10/10 coverage. AI agent integrity layer.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。