Real Skill packageSource verifiedClawHub registry

ClawSecCheck — OpenClaw Security Self-Audit

Free, local security self-audit for your own OpenClaw agent. Reads your OpenClaw config, bootstrap files, log files, agent session logs, and installed skills...

Identity and source

Publisher attributiongl0diregistry owner unverified by skillvetai

Functional categoryAgent Engineering, Security & Governanceautomatically inferred · 71% rule confidence

Package forminstruction with code140 recorded files

Canonical sourceClawHub registryclawhub:gl0di:clawseccheck

Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codeissues found

Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 9/29/2026.claude/skills/<skill-name>

1 structural issue

error: YAML frontmatter could not be parsed: Nested mappings are not allowed in compact mappings at line 3, column 14: description: Free, local, read-only security self-audit for your own OpenClaw a… ^ SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexissues found

Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 9/29/2026.agents/skills/<skill-name>

1 structural issue

error: YAML frontmatter could not be parsed: Nested mappings are not allowed in compact mappings at line 3, column 14: description: Free, local, read-only security self-audit for your own OpenClaw a… ^ SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawissues found

Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 9/29/2026skills/<skill-name>

1 structural issue

error: YAML frontmatter could not be parsed: Nested mappings are not allowed in compact mappings at line 3, column 14: description: Free, local, read-only security self-audit for your own OpenClaw a… ^ SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @gl0di/clawseccheck

clawhub inspect @gl0di/clawseccheck --version 4.3.1

Security evidence

SkillVetAI static result: high signal

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status: completed
Coverage: partial text content
Files: 40 / 140 inspected as text
Checked: 9/29/2026, 6:09:17 PM
Scanner: 0.1.3
Policy: 1.0.3

6 automated findings

mediumSKILL.md YAML frontmatter is invalidSKILL.md:1 · confidence 100%

Nested mappings are not allowed in compact mappings at line 3, column 14: description: Free, local, read-only security self-audit for your own OpenClaw a… ^

highRemote content is piped directly to a shellclawseccheck/adjudication/_builder.py:269 · confidence 98%curl <url> | bash

highRemote content is piped directly to a shellclawseccheck/checks/__init__.py:1055 · confidence 98%curl ... | sh

highDynamic code or shell execution is presentclawseccheck/adjudication/_builder.py:146 · confidence 78%eval(

highEncoded content is decoded and executedclawseccheck/adjudication/_builder.py:146 · confidence 90%atob

highEncoded content is decoded and executedclawseccheck/dossier.py:135 · confidence 90%base64

5 High/Critical review queue entries

STATIC_DOWNLOAD_PIPE_TO_SHELLpending

STATIC_DYNAMIC_CODE_EXECUTIONpending

STATIC_OBFUSCATED_EXECUTIONpending

Open human review queue →

6 inferred permission indicators

shell execution — automatically inferred
network access — automatically inferred
filesystem read — automatically inferred
filesystem write — automatically inferred
credential access — automatically inferred
browser control — automatically inferred

14 dependency and API indicators

api: 192.0.2.55
api: 192.0.2.88
api: 198.51.100.11
api: 198.51.100.2
api: 198.51.100.33
api: 198.51.100.5
api: 198.51.100.7
api: 203.0.113.77
api: clawhub.ai
api: collector.example.net
api: github.com
api: koi.ai
api: unit42.paloaltonetworks.com
api: www.w3.org

External clawhub result: clean

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked: 9/29/2026, 2:54:51 PM
Release binding: Matches this record

vt: clean
skillspector: suspicious
llm: clean

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:b1a57d548d2b2797d376d25c30dbbf0e928c1b531f1f278ab1b984dd5a0691cf

Show up to 30 recorded paths

audit.py
CHANGELOG.md
clawseccheck/__init__.py
clawseccheck/__main__.py
clawseccheck/adjudication/__init__.py
clawseccheck/adjudication/_builder.py
clawseccheck/adjudication/_verdicts.py
clawseccheck/ansi.py
clawseccheck/attest.py
clawseccheck/baseline.py
clawseccheck/behavioral.py
clawseccheck/brand.py
clawseccheck/canary.py
clawseccheck/catalog.py
clawseccheck/checks/__init__.py
clawseccheck/checks/_agents.py
clawseccheck/checks/_capability.py
clawseccheck/checks/_config.py
clawseccheck/checks/_content.py
clawseccheck/checks/_egress.py
clawseccheck/checks/_host.py
clawseccheck/checks/_lifecycle.py
clawseccheck/checks/_mcp.py
clawseccheck/checks/_shared.py
clawseccheck/checks/_vet.py
clawseccheck/cli.py
clawseccheck/collector.py
clawseccheck/configjournal.py
clawseccheck/configloader.py
clawseccheck/coverage.py

Source changelog

Release 4.3.1 (9ad5f14af1b9783dbe33493b4b9cf57e7a9d10d5)

Release security diff

highCompared fixed releases 4.2.1 and 4.3.1; 4 finding and 0 permission indicators were added.

Both fixed releases were scanned under the current scanner and policy, so finding, permission and dependency changes are available.

Change reasons and limitations

new high finding
finding surface changed
dependency surface changed
file surface changed
content hash changed

Observed release history

These older immutable releases were observed by prior successful syncs. They remain recorded when a newer release becomes current.

4.2.19/18/2026sha256:3fe95b73c950bb173789944c463b4d5e6edc51b17d6a4b8ff847c916ce4cc5d1

4.1.09/14/2026sha256:d5eec6b89852b3491c671eb6517dc6fc38262ccde60d9453d34d2e5880e97e4f

4.0.19/8/2026sha256:81087de33bea3eb12002e233ee5868eec2c91e8fa6080008798d2d5a6703dd73