~ / rigs / prompt-security / clawsec

prompt-security/clawsec

A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from

↗ GitHub ★ 1,108 agpl-3.0 updated 5d ago project Claude CodeCodex
share on X
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
CONTEXT TAX · EVERY TURN
~3.1k tokens
Moderate · median rig: 2.3k · breakdown
GUARDRAILS
0/5
No committed guardrails · details

Copy this rig

# review before running: this installs third-party code
$ npx degit prompt-security/clawsec/skills ./rig-clawsec/skills

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

$ npx degit prompt-security/clawsec/skills/claw-release .claude/skills/claw-release
$ npx degit prompt-security/clawsec/skills/clawsec-clawhub-checker .claude/skills/clawsec-clawhub-checker
$ npx degit prompt-security/clawsec/skills/clawsec-feed .claude/skills/clawsec-feed
$ npx degit prompt-security/clawsec/skills/clawsec-nanoclaw .claude/skills/clawsec-nanoclaw
$ npx degit prompt-security/clawsec/skills/clawsec-scanner .claude/skills/clawsec-scanner
$ npx degit prompt-security/clawsec/skills/clawsec-suite .claude/skills/clawsec-suite
$ npx degit prompt-security/clawsec/skills/clawtributor .claude/skills/clawtributor
$ npx degit prompt-security/clawsec/skills/hermes-attestation-guardian .claude/skills/hermes-attestation-guardian
$ npx degit prompt-security/clawsec/skills/hermes-traffic-guardian .claude/skills/hermes-traffic-guardian
$ npx degit prompt-security/clawsec/skills/nanoclaw-traffic-guardian .claude/skills/nanoclaw-traffic-guardian
$ npx degit prompt-security/clawsec/skills/openclaw-audit-watchdog .claude/skills/openclaw-audit-watchdog
$ npx degit prompt-security/clawsec/skills/openclaw-traffic-guardian .claude/skills/openclaw-traffic-guardian
$ npx degit prompt-security/clawsec/skills/picoclaw-security-guardian .claude/skills/picoclaw-security-guardian
$ npx degit prompt-security/clawsec/skills/picoclaw-self-pen-testing .claude/skills/picoclaw-self-pen-testing
$ npx degit prompt-security/clawsec/skills/picoclaw-traffic-guardian .claude/skills/picoclaw-traffic-guardian
$ npx degit prompt-security/clawsec/skills/soul-guardian .claude/skills/soul-guardian

This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:

{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(**/.env)",
      "Read(~/.ssh/**)",
      "Bash(rm -rf *)",
      "Read(**/*.pem)",
      "Bash(rm -rf /)",
      "Bash(git push --force:*)",
      "Bash(sudo *)",
      "Read(.env)",
      "Bash(rm -rf /*)",
      "Read(./.env.*)",
      "Read(~/.aws/**)",
      "Bash(git push --force*)",
      "Bash(rm -rf:*)",
      "Read(**/*.key)",
      "Read(**/.env.*)",
      "Bash(sudo:*)",
      "Bash(git reset --hard*)",
      "Bash(git reset --hard:*)",
      "Read(.env.*)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(git push *)",
      "Bash(git commit:*)",
      "Bash(rm *)",
      "Bash(rm:*)",
      "Bash(git rebase *)",
      "Bash(wget *)",
      "Bash(npm publish:*)",
      "Bash(git commit *)",
      "Bash(gh pr merge *)"
    ]
  }
}

Skills (16)

Similar rigs

copied ✓