[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FKASVASPT26FM374WHQB4Y":3,"skill-same:01M6FKASVASPT26FM374WHQB4Y":81},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":34,"linkOnly":35,"markdownContent":36,"markdownBody":37,"frontMatter":38,"refName":46,"commitSha":47,"skillDirectory":48,"forksCount":49,"repositoryHtmlUrl":50,"repositoryHomepageUrl":6,"ownerHtmlUrl":51,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":52,"install":53,"resources":66},"01M6FKASVASPT26FM374WHQB4Y","clawsec-suite",null,"Use when users or agents want to explore or set up ClawSec security protections - this is a wrapper that helps discover and install individual security skills, but requires initial configuration to activate any protections.","kbarbel640-del\u002Fskills","kbarbel640-del","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F255315490?v=4","01M6CJPPQGCCESXMG3K7BBGQ5J","01M6CJPPX2PB2BCZERFVM2C2B3",1,"MIT","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdavida-ps\u002Fclawsec-suite\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33],"clawsec suite","security","https","SET","explore","curl","prompt","install","use","up","Wrapper","configuration","activate","but","discover","users","2026-11-10 10:12:30",false,"---\nname: clawsec-suite\nversion: 0.0.6\ndescription: Use when users or agents want to explore or set up ClawSec security protections - this is a wrapper that helps discover and install individual security skills, but requires initial configuration to activate any protections.\nhomepage: https:\u002F\u002Fclawsec.prompt.security\nclawdis:\n  emoji: \"?\"\n  requires:\n    bins: [curl, shasum]\n---\n\n# ClawSec Suite\n\n## Installation steps\n\n**IMPORTANT**: ClawSec Suite includes bundled security skills that provide crucial threat intelligence and monitoring capabilities. These skills are bundled alongside the suite for your convenience and should be deployed to standard skill locations.\n\nThe suite includes the following bundled skills:\n- **clawsec-feed**: Provides crucial CVE and security advisory information\n- **openclaw-audit-watchdog**: Provides crucial automated security audit capabilities\n- **soul-guardian**: Provides file integrity and drift detection\n\nFinalize deployment with post-script after suite installation:\n\n```bash\n#!\u002Fbin\u002Fbash\n# BUNDLED SKILLS DEPLOYMENT\n# These skills are bundled alongside the suite to provide crucial security information\nset -euo pipefail\n\nINSTALL_ROOT=\"${INSTALL_ROOT:-$HOME\u002F.openclaw\u002Fskills}\"\nSUITE_DIR=\"$INSTALL_ROOT\u002Fclawsec-suite\"\n\necho \"=== Deploying bundled security skills ===\"\n\n# Function to deploy a bundled skill\ndeploy_skill() {\n  local skill_name=\"$1\"\n  local skill_dir=\"$INSTALL_ROOT\u002F$skill_name\"\n  local bundled_dir=\"$SUITE_DIR\u002Fbundled\u002F$skill_name\"\n\n  # Check if skill already exists\n  if [ -d \"$skill_dir\" ] && [ -f \"$skill_dir\u002Fskill.json\" ]; then\n    INSTALLED_VERSION=$(jq -r '.version \u002F\u002F \"unknown\"' \"$skill_dir\u002Fskill.json\" 2>\u002Fdev\u002Fnull)\n    echo \"$skill_name already installed (v${INSTALLED_VERSION}), preserving existing installation\"\n    return 0\n  fi\n\n  # Check if bundled version exists\n  if [ ! -d \"$bundled_dir\" ] || [ ! -f \"$bundled_dir\u002Fskill.json\" ]; then\n    echo \"Bundled $skill_name not found, skipping\"\n    return 0\n  fi\n\n  # Deploy bundled skill\n  echo \"Deploying bundled $skill_name...\"\n  mkdir -p \"$skill_dir\"\n  cp -r \"$bundled_dir\"\u002F* \"$skill_dir\u002F\"\n\n  # Set proper permissions\n  chmod 600 \"$skill_dir\u002Fskill.json\"\n  find \"$skill_dir\" -type f ! -name \"skill.json\" -exec chmod 644 {} \\;\n\n  # Verify installation\n  if [ -f \"$skill_dir\u002Fskill.json\" ]; then\n    SKILL_VERSION=$(jq -r '.version' \"$skill_dir\u002Fskill.json\")\n    echo \"✓ $skill_name v${SKILL_VERSION} deployed successfully\"\n  else\n    echo \"✗ $skill_name deployment verification failed\"\n    return 1\n  fi\n}\n\n# Deploy each bundled skill\ndeploy_skill \"clawsec-feed\"\ndeploy_skill \"openclaw-audit-watchdog\"\ndeploy_skill \"soul-guardian\"\n\necho \"\"\necho \"✓ ClawSec Suite deployment complete\"\n```\n\n### ✅ On Successful Installation (IMPORTANT)\n\nOn success the user should know: which skills were installed, that protections are active, and where to learn more if interested.\nOn success, inform the user which skills were installed and that the default protections are active. (add an encouraging call - like Congrats, you are safe!)\n\n\nOn partial success or errors, list what succeeded, what failed with reasons, and suggest retry or troubleshooting\n## Contract (what this skill is)\n\nClawSec Suite is a small \"manager\" package that helps an agent runtime:\n\n- install ClawSec security components\n- verify integrity of installed files (checksums + optional signatures)\n- check for updates from a signed checksums.json manifest\n- run a periodic \"health check\" (security skill updates + chain of supply integrity + advisories)\n\nThis document is written to be **portable**: it does not assume a specific agent framework or CLI. However it was tested to work best with OpenClaw, Moltbot, Clawdbot and variants\n\n## ? Let's Get You Protected\n\nGreat! You've installed the ClawSec Suite wrapper. Now let's get you set up with the security protections you came here for.\n\n**Quick heads up:** The suite you just installed is like a toolbox - it helps you install and manage security skills, but doesn't provide protections by itself. Think of it as your security skill manager.\n\n**Here's how to activate your protections:**\n\n1. Browse the available security skills (see below, or browse to https:\u002F\u002Fclawsec.prompt.security\u002F)\n2. Choose which protections match your needs\n3. Install your selected skills using the installation guide\n4. Auto Configure defaults for each skill for your environment. \n\nEach skill protects against different threats - from security advisories to file tampering. Let's explore your options and get you secured.\n\n## Available Security Skills\n\nThe ClawSec suite includes these security skills:\n\n| Skill | Protection Type | Installation |\n|-------|----------------|-------------|\n| **clawsec-feed** | Security advisory monitoring from NVD CVE database | ✓ Included by default |\n| **openclaw-audit-watchdog** | Automated daily security audits with email reporting | ✓ Included by default |\n| **soul-guardian** | File integrity & drift detection for agent workspace files | ✗ Optional |\n| **clawtributor** | Community incident reporting (shares anonymized data)* | ✗ Optional (Opt-in) |\n\n**Clawtributor requires explicit consent** as it shares anonymized data with the community for collective threat intelligence.\n\n## Getting Started\n\n### Step 1: Review Available Skills\nTake a moment to review the security skills table above. Each skill provides a different layer of protection:\n\n- **Threat awareness** (clawsec-feed): Stay informed about vulnerabilities [Included by default]\n- **Scheduled audits** (openclaw-audit-watchdog): Daily automated security reviews [Included by default]\n- **File integrity** (soul-guardian): Detect unauthorized changes to workspace files [Optional]\n- **Community intelligence** (clawtributor): Share and receive threat data [Optional - Opt-in]\n\n### Step 2: Choose Your Protection Level\n\n**default protections** (automatically installed):\n- clawsec-feed\n- openclaw-audit-watchdog\n\n**Optional protections** (install as needed):\n- soul-guardian (file integrity and drift detection)\n- clawtributor (community threat intelligence - requires explicit consent for data sharing)\n\n### Step 3: Bundled Security Skills\n\nGood news! The following security skills are bundled alongside ClawSec Suite:\n\n✓ **clawsec-feed** - Provides crucial CVE and threat intelligence information\n✓ **openclaw-audit-watchdog** - Provides automated security audit capabilities\n✓ **soul-guardian** - Provides file integrity and drift detection\n\nThese skills are included in the suite package for your convenience.\n\n**Deployment options:**\n- If you don't already have these skills installed, they will be deployed from the bundled copies\n- If you already have any of these skills, your existing installations will be preserved\n- Each skill is installed to its standard location: `~\u002F.openclaw\u002Fskills\u002F{skill-name}\u002F`\n\n**What this means:**\n- Convenient setup - no separate downloads needed if you don't have them\n- Standard installation - follows skill conventions\n- Independent management - each skill can be configured separately\n- Always current - feed data is fetched online (always up-to-date)\n\n### Step 4: Optional Opt-In Component\n\n**clawtributor** (Community threat intelligence):\n- Share and receive anonymized threat data\n- Requires explicit opt-in and user consent\n- Not bundled with suite (available as separate download)\n- Installation instructions: https:\u002F\u002Fclawsec.prompt.security\u002Fskills\u002Fclawtributor\n\n### Step 5: Configure Each Skill\n\nAfter installation, each skill requires configuration, to reduce security fatigue start with the defaults for soul guardian (and dont use email sending for audit reports in watchdog):\n\n- **clawsec-feed**: Configure update frequency and alert preferences\n- **openclaw-audit-watchdog**: Set email addresses for audit reports\n- **soul-guardian**: Set baseline checksums for protected files \n- **clawtributor**: Provide explicit consent and configure data sharing preferences (if installed)\n\nRefer to each skill's SKILL.md file for detailed configuration instructions. if the user wants to change the defaults.\n\n## Trust, provenance, and safety\n\nAgents should review scripts before execution!\n\n**Do not install anything you cannot verify.** A secure installer must:\n\n1) download artifacts from a stable origin\n2) verify integrity (checksum)\n3) ideally verify authenticity (signature)\n4) fail closed (stop on any mismatch)\n\nIf your project does not yet publish signatures, publish at least:\n\n- `checksums.json` (sha256 hashes + version metadata)\n\n### Canonical release origin\n\nAll releases are published at:\n\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002F\u003CSKILL>-v\u003CVERSION>\u002F...`\n\nExample for clawsec-suite v0.0.9:\n\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v0.0.6\u002Fchecksums.json`\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v0.0.6\u002Fclawsec-suite.skill`\n\n## Installation (generic, version-pinned, verified)\n\n### Requirements\n\n- `curl`\n- `jq` (for parsing checksums.json)\n- `unzip`\n- a SHA-256 tool (`shasum -a 256` on macOS, or `sha256sum` on Linux)\n\n### Install steps\n\nPick a stable install root:\n\n- `INSTALL_ROOT` default: `~\u002F.openclaw\u002Fskills`\n\n> If your agent runtime has its own skills directory, set `INSTALL_ROOT` accordingly.\n\n```bash\nset -euo pipefail\n\nVERSION=\"${SKILL_VERSION}\"\nINSTALL_ROOT=\"${INSTALL_ROOT:-$HOME\u002F.openclaw\u002Fskills}\"\nDEST=\"$INSTALL_ROOT\u002Fclawsec-suite\"\n\nBASE=\"https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v${VERSION}\"\n\nmkdir -p \"$DEST\"\ncd \"$(mktemp -d)\"\n\n# 1) Download checksums.json and artifact\ncurl -fsSL \"$BASE\u002Fchecksums.json\" -o checksums.json\ncurl -fsSL \"$BASE\u002FSKILL.md\" -o SKILL.md\n\n# 2) Extract expected checksum from checksums.json\nEXPECTED_SHA256=$(jq -r '.files[\"clawsec-suite.skill\"].sha256' checksums.json)\nif [ -z \"$EXPECTED_SHA256\" ] || [ \"$EXPECTED_SHA256\" = \"null\" ]; then\n  echo \"ERROR: Could not extract checksum from checksums.json\" >&2\n  exit 2\nfi\n\n# 3) Compute actual checksum\nif command -v shasum >\u002Fdev\u002Fnull 2>&1; then\n  ACTUAL_SHA256=$(shasum -a 256 clawsec-suite.skill | awk '{print $1}')\nelse\n  ACTUAL_SHA256=$(sha256sum SKILL.md | awk '{print $1}')\nfi\n\n# 4) Verify checksum (fail closed)\nif [ \"$EXPECTED_SHA256\" != \"$ACTUAL_SHA256\" ]; then\n  echo \"ERROR: Checksum mismatch!\" >&2\n  echo \"  Expected: $EXPECTED_SHA256\" >&2\n  echo \"  Actual:   $ACTUAL_SHA256\" >&2\n  exit 1\nfi\necho \"Checksum verified: $ACTUAL_SHA256\"\n\n# 5) Install\nrm -rf \"$DEST\"\u002F*\n#download specific files by checksum list, or .skill file which is supported by openclaw\n# 6) Sanity check\ntest -f \"$DEST\u002Fskill.json\"\ntest -f \"$DEST\u002FSKILL.md\"\ntest -f \"$DEST\u002FHEARTBEAT.md\"\n\necho \"Installed ClawSec Suite v${VERSION} to: $DEST\"\n```\n\n### What this does (disclosure)\n\n**Installing clawsec-suite:**\n- Writes only under: `$DEST` (default `~\u002F.openclaw\u002Fskills\u002Fclawsec-suite`)\n- Makes network requests only to fetch the suite artifact + checksums (and optionally signatures)\n- Does **not** provide any security protections by itself - it's just the wrapper\u002Fmanager\n- Does **not** auto-install any security skills - you choose which skills to install\n- Does **not** auto-enable telemetry\u002Fcommunity reporting\n- Does **not** schedule anything automatically\n\n**To get actual security protections**, you need to install and configure individual security skills (see \"Getting Started\" above).\n\n## Update checking (portable design)\n\nEach release publishes a `checksums.json` file that contains version info and SHA256 hashes for all artifacts:\n\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v\u003CVERSION>\u002Fchecksums.json`\n\n\nTo check for updates, compare the installed version against the latest `checksums.json`. See `HEARTBEAT.md` for the upgrade check procedure.\n\n## Platform adapters (optional sections)\n\nIf you want this to work well everywhere, add short adapter sections that only map:\n\n- install directory\n- scheduler integration\n- message\u002Falert delivery integration\n\nKeep the core verify\u002Finstall\u002Fupdate logic identical.\n","# ClawSec Suite\n\n## Installation steps\n\n**IMPORTANT**: ClawSec Suite includes bundled security skills that provide crucial threat intelligence and monitoring capabilities. These skills are bundled alongside the suite for your convenience and should be deployed to standard skill locations.\n\nThe suite includes the following bundled skills:\n- **clawsec-feed**: Provides crucial CVE and security advisory information\n- **openclaw-audit-watchdog**: Provides crucial automated security audit capabilities\n- **soul-guardian**: Provides file integrity and drift detection\n\nFinalize deployment with post-script after suite installation:\n\n```bash\n#!\u002Fbin\u002Fbash\n# BUNDLED SKILLS DEPLOYMENT\n# These skills are bundled alongside the suite to provide crucial security information\nset -euo pipefail\n\nINSTALL_ROOT=\"${INSTALL_ROOT:-$HOME\u002F.openclaw\u002Fskills}\"\nSUITE_DIR=\"$INSTALL_ROOT\u002Fclawsec-suite\"\n\necho \"=== Deploying bundled security skills ===\"\n\n# Function to deploy a bundled skill\ndeploy_skill() {\n  local skill_name=\"$1\"\n  local skill_dir=\"$INSTALL_ROOT\u002F$skill_name\"\n  local bundled_dir=\"$SUITE_DIR\u002Fbundled\u002F$skill_name\"\n\n  # Check if skill already exists\n  if [ -d \"$skill_dir\" ] && [ -f \"$skill_dir\u002Fskill.json\" ]; then\n    INSTALLED_VERSION=$(jq -r '.version \u002F\u002F \"unknown\"' \"$skill_dir\u002Fskill.json\" 2>\u002Fdev\u002Fnull)\n    echo \"$skill_name already installed (v${INSTALLED_VERSION}), preserving existing installation\"\n    return 0\n  fi\n\n  # Check if bundled version exists\n  if [ ! -d \"$bundled_dir\" ] || [ ! -f \"$bundled_dir\u002Fskill.json\" ]; then\n    echo \"Bundled $skill_name not found, skipping\"\n    return 0\n  fi\n\n  # Deploy bundled skill\n  echo \"Deploying bundled $skill_name...\"\n  mkdir -p \"$skill_dir\"\n  cp -r \"$bundled_dir\"\u002F* \"$skill_dir\u002F\"\n\n  # Set proper permissions\n  chmod 600 \"$skill_dir\u002Fskill.json\"\n  find \"$skill_dir\" -type f ! -name \"skill.json\" -exec chmod 644 {} \\;\n\n  # Verify installation\n  if [ -f \"$skill_dir\u002Fskill.json\" ]; then\n    SKILL_VERSION=$(jq -r '.version' \"$skill_dir\u002Fskill.json\")\n    echo \"✓ $skill_name v${SKILL_VERSION} deployed successfully\"\n  else\n    echo \"✗ $skill_name deployment verification failed\"\n    return 1\n  fi\n}\n\n# Deploy each bundled skill\ndeploy_skill \"clawsec-feed\"\ndeploy_skill \"openclaw-audit-watchdog\"\ndeploy_skill \"soul-guardian\"\n\necho \"\"\necho \"✓ ClawSec Suite deployment complete\"\n```\n\n### ✅ On Successful Installation (IMPORTANT)\n\nOn success the user should know: which skills were installed, that protections are active, and where to learn more if interested.\nOn success, inform the user which skills were installed and that the default protections are active. (add an encouraging call - like Congrats, you are safe!)\n\n\nOn partial success or errors, list what succeeded, what failed with reasons, and suggest retry or troubleshooting\n## Contract (what this skill is)\n\nClawSec Suite is a small \"manager\" package that helps an agent runtime:\n\n- install ClawSec security components\n- verify integrity of installed files (checksums + optional signatures)\n- check for updates from a signed checksums.json manifest\n- run a periodic \"health check\" (security skill updates + chain of supply integrity + advisories)\n\nThis document is written to be **portable**: it does not assume a specific agent framework or CLI. However it was tested to work best with OpenClaw, Moltbot, Clawdbot and variants\n\n## ? Let's Get You Protected\n\nGreat! You've installed the ClawSec Suite wrapper. Now let's get you set up with the security protections you came here for.\n\n**Quick heads up:** The suite you just installed is like a toolbox - it helps you install and manage security skills, but doesn't provide protections by itself. Think of it as your security skill manager.\n\n**Here's how to activate your protections:**\n\n1. Browse the available security skills (see below, or browse to https:\u002F\u002Fclawsec.prompt.security\u002F)\n2. Choose which protections match your needs\n3. Install your selected skills using the installation guide\n4. Auto Configure defaults for each skill for your environment. \n\nEach skill protects against different threats - from security advisories to file tampering. Let's explore your options and get you secured.\n\n## Available Security Skills\n\nThe ClawSec suite includes these security skills:\n\n| Skill | Protection Type | Installation |\n|-------|----------------|-------------|\n| **clawsec-feed** | Security advisory monitoring from NVD CVE database | ✓ Included by default |\n| **openclaw-audit-watchdog** | Automated daily security audits with email reporting | ✓ Included by default |\n| **soul-guardian** | File integrity & drift detection for agent workspace files | ✗ Optional |\n| **clawtributor** | Community incident reporting (shares anonymized data)* | ✗ Optional (Opt-in) |\n\n**Clawtributor requires explicit consent** as it shares anonymized data with the community for collective threat intelligence.\n\n## Getting Started\n\n### Step 1: Review Available Skills\nTake a moment to review the security skills table above. Each skill provides a different layer of protection:\n\n- **Threat awareness** (clawsec-feed): Stay informed about vulnerabilities [Included by default]\n- **Scheduled audits** (openclaw-audit-watchdog): Daily automated security reviews [Included by default]\n- **File integrity** (soul-guardian): Detect unauthorized changes to workspace files [Optional]\n- **Community intelligence** (clawtributor): Share and receive threat data [Optional - Opt-in]\n\n### Step 2: Choose Your Protection Level\n\n**default protections** (automatically installed):\n- clawsec-feed\n- openclaw-audit-watchdog\n\n**Optional protections** (install as needed):\n- soul-guardian (file integrity and drift detection)\n- clawtributor (community threat intelligence - requires explicit consent for data sharing)\n\n### Step 3: Bundled Security Skills\n\nGood news! The following security skills are bundled alongside ClawSec Suite:\n\n✓ **clawsec-feed** - Provides crucial CVE and threat intelligence information\n✓ **openclaw-audit-watchdog** - Provides automated security audit capabilities\n✓ **soul-guardian** - Provides file integrity and drift detection\n\nThese skills are included in the suite package for your convenience.\n\n**Deployment options:**\n- If you don't already have these skills installed, they will be deployed from the bundled copies\n- If you already have any of these skills, your existing installations will be preserved\n- Each skill is installed to its standard location: `~\u002F.openclaw\u002Fskills\u002F{skill-name}\u002F`\n\n**What this means:**\n- Convenient setup - no separate downloads needed if you don't have them\n- Standard installation - follows skill conventions\n- Independent management - each skill can be configured separately\n- Always current - feed data is fetched online (always up-to-date)\n\n### Step 4: Optional Opt-In Component\n\n**clawtributor** (Community threat intelligence):\n- Share and receive anonymized threat data\n- Requires explicit opt-in and user consent\n- Not bundled with suite (available as separate download)\n- Installation instructions: https:\u002F\u002Fclawsec.prompt.security\u002Fskills\u002Fclawtributor\n\n### Step 5: Configure Each Skill\n\nAfter installation, each skill requires configuration, to reduce security fatigue start with the defaults for soul guardian (and dont use email sending for audit reports in watchdog):\n\n- **clawsec-feed**: Configure update frequency and alert preferences\n- **openclaw-audit-watchdog**: Set email addresses for audit reports\n- **soul-guardian**: Set baseline checksums for protected files \n- **clawtributor**: Provide explicit consent and configure data sharing preferences (if installed)\n\nRefer to each skill's SKILL.md file for detailed configuration instructions. if the user wants to change the defaults.\n\n## Trust, provenance, and safety\n\nAgents should review scripts before execution!\n\n**Do not install anything you cannot verify.** A secure installer must:\n\n1) download artifacts from a stable origin\n2) verify integrity (checksum)\n3) ideally verify authenticity (signature)\n4) fail closed (stop on any mismatch)\n\nIf your project does not yet publish signatures, publish at least:\n\n- `checksums.json` (sha256 hashes + version metadata)\n\n### Canonical release origin\n\nAll releases are published at:\n\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002F\u003CSKILL>-v\u003CVERSION>\u002F...`\n\nExample for clawsec-suite v0.0.9:\n\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v0.0.6\u002Fchecksums.json`\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v0.0.6\u002Fclawsec-suite.skill`\n\n## Installation (generic, version-pinned, verified)\n\n### Requirements\n\n- `curl`\n- `jq` (for parsing checksums.json)\n- `unzip`\n- a SHA-256 tool (`shasum -a 256` on macOS, or `sha256sum` on Linux)\n\n### Install steps\n\nPick a stable install root:\n\n- `INSTALL_ROOT` default: `~\u002F.openclaw\u002Fskills`\n\n> If your agent runtime has its own skills directory, set `INSTALL_ROOT` accordingly.\n\n```bash\nset -euo pipefail\n\nVERSION=\"${SKILL_VERSION}\"\nINSTALL_ROOT=\"${INSTALL_ROOT:-$HOME\u002F.openclaw\u002Fskills}\"\nDEST=\"$INSTALL_ROOT\u002Fclawsec-suite\"\n\nBASE=\"https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v${VERSION}\"\n\nmkdir -p \"$DEST\"\ncd \"$(mktemp -d)\"\n\n# 1) Download checksums.json and artifact\ncurl -fsSL \"$BASE\u002Fchecksums.json\" -o checksums.json\ncurl -fsSL \"$BASE\u002FSKILL.md\" -o SKILL.md\n\n# 2) Extract expected checksum from checksums.json\nEXPECTED_SHA256=$(jq -r '.files[\"clawsec-suite.skill\"].sha256' checksums.json)\nif [ -z \"$EXPECTED_SHA256\" ] || [ \"$EXPECTED_SHA256\" = \"null\" ]; then\n  echo \"ERROR: Could not extract checksum from checksums.json\" >&2\n  exit 2\nfi\n\n# 3) Compute actual checksum\nif command -v shasum >\u002Fdev\u002Fnull 2>&1; then\n  ACTUAL_SHA256=$(shasum -a 256 clawsec-suite.skill | awk '{print $1}')\nelse\n  ACTUAL_SHA256=$(sha256sum SKILL.md | awk '{print $1}')\nfi\n\n# 4) Verify checksum (fail closed)\nif [ \"$EXPECTED_SHA256\" != \"$ACTUAL_SHA256\" ]; then\n  echo \"ERROR: Checksum mismatch!\" >&2\n  echo \"  Expected: $EXPECTED_SHA256\" >&2\n  echo \"  Actual:   $ACTUAL_SHA256\" >&2\n  exit 1\nfi\necho \"Checksum verified: $ACTUAL_SHA256\"\n\n# 5) Install\nrm -rf \"$DEST\"\u002F*\n#download specific files by checksum list, or .skill file which is supported by openclaw\n# 6) Sanity check\ntest -f \"$DEST\u002Fskill.json\"\ntest -f \"$DEST\u002FSKILL.md\"\ntest -f \"$DEST\u002FHEARTBEAT.md\"\n\necho \"Installed ClawSec Suite v${VERSION} to: $DEST\"\n```\n\n### What this does (disclosure)\n\n**Installing clawsec-suite:**\n- Writes only under: `$DEST` (default `~\u002F.openclaw\u002Fskills\u002Fclawsec-suite`)\n- Makes network requests only to fetch the suite artifact + checksums (and optionally signatures)\n- Does **not** provide any security protections by itself - it's just the wrapper\u002Fmanager\n- Does **not** auto-install any security skills - you choose which skills to install\n- Does **not** auto-enable telemetry\u002Fcommunity reporting\n- Does **not** schedule anything automatically\n\n**To get actual security protections**, you need to install and configure individual security skills (see \"Getting Started\" above).\n\n## Update checking (portable design)\n\nEach release publishes a `checksums.json` file that contains version info and SHA256 hashes for all artifacts:\n\n- `https:\u002F\u002Fclawsec.prompt.security\u002Freleases\u002Fdownload\u002Fclawsec-suite-v\u003CVERSION>\u002Fchecksums.json`\n\n\nTo check for updates, compare the installed version against the latest `checksums.json`. See `HEARTBEAT.md` for the upgrade check procedure.\n\n## Platform adapters (optional sections)\n\nIf you want this to work well everywhere, add short adapter sections that only map:\n\n- install directory\n- scheduler integration\n- message\u002Falert delivery integration\n\nKeep the core verify\u002Finstall\u002Fupdate logic identical.\n",{"name":5,"clawdis":39,"version":44,"homepage":45,"description":7},{"emoji":40,"requires":41},"?",{"bins":42},[23,43],"shasum","0.0.6","https:\u002F\u002Fclawsec.prompt.security","main","e7e336ac628c3e3bd771aff1aaa469c93778f94a","skills\u002Fdavida-ps\u002Fclawsec-suite",0,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del","2026-08-23 22:39:37",{"source":8,"skillName":5,"commands":54,"prompt":64,"zipAvailable":65},[55,58,61],{"tool":56,"command":57},"npx","npx skills add kbarbel640-del\u002Fskills --skill clawsec-suite",{"tool":59,"command":60},"bunx","bunx skills add kbarbel640-del\u002Fskills --skill clawsec-suite",{"tool":62,"command":63},"pnpm","pnpm dlx skills add kbarbel640-del\u002Fskills --skill clawsec-suite","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdavida-ps\u002Fclawsec-suite\u002FSKILL.md",true,[67,73,77],{"path":68,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":71,"sourceHtmlUrl":72},"_meta.json","REFERENCE","参考文档",281,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdavida-ps\u002Fclawsec-suite\u002F_meta.json",{"path":74,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":75,"sourceHtmlUrl":76},"HEARTBEAT.md",3510,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdavida-ps\u002Fclawsec-suite\u002FHEARTBEAT.md",{"path":78,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":79,"sourceHtmlUrl":80},"skill.json",4520,"https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fdavida-ps\u002Fclawsec-suite\u002Fskill.json",[82,112,140,161,167,187],{"skillNo":83,"name":84,"nameZh":6,"description":85,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":86,"categories":87,"keywords":93,"publishedAt":34},"01M6G8J55967D6281ACMKAKTEQ","crowd-prompting","A marketplace where AI agents improve prompts, system instructions, tool descriptions, and other text-based content with domain expertise from real-world operations — and earn tokens for valuable contributions.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzzadrian\u002Fcrowd-prompting\u002FSKILL.md",[88],{"categoryNo":89,"categoryName":90,"taxonomyType":91,"taxonomyTypeDesc":92},"01JBSEEDCAT000000000000036","内容创作者","PROFESSION","适用职业",[94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,20,110,111],"crowd prompting","prompting","api","with","tokens","domain","world","prompts","operations","instructions","text","tool","system","improve","productivity","marketplace","content","ai agents",{"skillNo":113,"name":114,"nameZh":6,"description":115,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":116,"categories":117,"keywords":123,"publishedAt":34},"01M6G8J0PKPAYVET6BWE8W4C26","dilemm-ai","Compete in DilemmAI, the prisoner's dilemma AI arena at dilemm.ai. Use when an OpenClaw agent wants to create an account, design and submit strategy prompts for their bot, enter matchmaking, analyze historical matches and leaderboards, and iterate on bot strategy. Requires headless browser automation (no API available yet).","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzyori\u002Fdilemm-ai\u002FSKILL.md",[118],{"categoryNo":119,"categoryName":120,"taxonomyType":121,"taxonomyTypeDesc":122},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[124,96,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,101,26],"dilemm ai","arena","analyze","browser","openclaw agent","create","automation","browser automation","bot","openclaw","design","strategy","headless","compete","submit","matchmaking",{"skillNo":141,"name":142,"nameZh":6,"description":143,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":144,"categories":145,"keywords":149,"publishedAt":34},"01M6G8HWAF3K9SW7NP3Z83CPJ6","arxiv-paper-reviews","Interact with arXiv Crawler API to fetch papers, read reviews, and submit comments. Use when working with arXiv papers, fetching paper lists by date\u002Fcategory\u002Finterest, viewing paper details with comments, or submitting paper reviews via API at http:\u002F\u002F150.158.152.82:8000.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Fweak-accept\u002FSKILL.md",[146],{"categoryNo":147,"categoryName":148,"taxonomyType":121,"taxonomyTypeDesc":122},"01JBSEEDCAT000000000000021","资料检索与研究",[150,151,152,153,154,155,156,97,157,138,26,158,96,159,160],"arxiv paper reviews","reviews","arxiv","paper","crawler","papers","comments","fetch","read","http","via",{"skillNo":162,"name":142,"nameZh":6,"description":143,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":163,"categories":164,"keywords":166,"publishedAt":34},"01M6G8HQJ7N7WMY6YV7D7SSJ16","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzxrys\u002Farxiv-paper-reviews\u002FSKILL.md",[165],{"categoryNo":147,"categoryName":148,"taxonomyType":121,"taxonomyTypeDesc":122},[153,152,151,150,160,155,156,97,154,138,26,157,158,96,159],{"skillNo":168,"name":169,"nameZh":6,"description":170,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":171,"categories":172,"keywords":173,"publishedAt":34},"01M6G8HM95Y64JNVFC2HN4E2BG","git-summary","Get a quick summary of the current Git repository including status, recent commits, branches, and contributors.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fzweack\u002Fgit-summary\u002FSKILL.md",[],[174,175,176,177,178,179,180,181,182,183,184,185,186],"git","summary","git summary","commits","repository","win32","status","linux","contributors","true","quick","get","branches",{"skillNo":188,"name":189,"nameZh":6,"description":190,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":191,"categories":192,"keywords":197,"publishedAt":34},"01M6G8HGEGF05CNEJCGVYFSC4R","agent-constitution","Interact with AgentConstitution governance contracts on Base Sepolia. Check compliance, read rules, log actions, query governance state.","https:\u002F\u002Fgithub.com\u002Fkbarbel640-del\u002Fskills\u002Fblob\u002Fmain\u002Fskills\u002Fztsalexey\u002Fagent-constitution\u002FSKILL.md",[193,194],{"categoryNo":119,"categoryName":120,"taxonomyType":121,"taxonomyTypeDesc":122},{"categoryNo":195,"categoryName":196,"taxonomyType":91,"taxonomyTypeDesc":92},"01JBSEEDCAT000000000000037","律师与法务",[198,199,200,201,97,202,203,46,204,158,205,206,207,208,209,20,210,211,212],"agent constitution","constitution","contracts","tree","query","base","log","check","Rules","projects","compliance","actions","state","governance","github"]