How do I install the Openclaw Action skill?

Run npx skillmds@latest add dvcrn/openclaw-action in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Openclaw Action safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Openclaw Action?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Openclaw Action free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Openclaw Action?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Openclaw Action by dvcrn — Agent Skill

Name: Openclaw Action
Rating: 4.2 (5 reviews)
Author: dvcrn

File contents

OpenClaw Security Action

GitHub Action that scans agent skills for security issues on every PR.

What It Scans

Scanner	What It Catches
sentry	API keys, tokens, passwords, credentials in code
bastion	Prompt injection markers, shell injection patterns
egress	Suspicious network calls, data exfiltration patterns

Quick Start

Add to .github/workflows/security.yml:

name: Security Scan
on:
  pull_request:
    paths:
      - 'skills/**'
      - '.openclaw/**'
  push:
    branches: [main]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: AtlasPA/openclaw-action@v1
        with:
          workspace: '.'
          fail-on-findings: 'true'

Inputs

Input	Default	Description
`workspace`	`.`	Path to scan
`fail-on-findings`	`true`	Fail the check if issues found
`scan-secrets`	`true`	Enable secret scanning
`scan-injection`	`true`	Enable injection scanning
`scan-egress`	`true`	Enable egress scanning

Outputs

Output	Description
`findings-count`	Total number of issues found
`has-critical`	`true` if critical/high severity issues

Philosophy

This action detects and alerts only. It will:

Flag security issues in PR checks
Annotate specific lines with findings
Generate a summary report

It will NOT:

Automatically modify your code
Quarantine or delete files
Make any changes to your repository

For automated remediation, see OpenClaw Pro.

Requirements

Python 3.8+ (auto-installed by action)
No external dependencies

---name: openclaw-actiondescription: GitHub Action for automated security scanning of agent workspaces. Detects exposed secrets, prompt/shell injection, and data exfiltration patterns in PRs and commits.---# OpenClaw Security ActionGitHub Action that scans agent skills for security issues on every PR.## What It Scans| Scanner | What It Catches ||---------|-----------------|| **sentry** | API keys, tokens, passwords, credentials in code || **bastion** | Prompt injection markers, shell injection patterns || **egress** | Suspicious network calls, data exfiltration patterns |## Quick StartAdd to `.github/workflows/security.yml`:```yamlname: Security Scanon: pull_request: paths: - 'skills/**' - '.openclaw/**' push: branches: [main]jobs: scan: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: AtlasPA/openclaw-action@v1 with: workspace: '.' fail-on-findings: 'true'```## Inputs| Input | Default | Description ||-------|---------|-------------|| `workspace` | `.` | Path to scan || `fail-on-findings` | `true` | Fail the check if issues found || `scan-secrets` | `true` | Enable secret scanning || `scan-injection` | `true` | Enable injection scanning || `scan-egress` | `true` | Enable egress scanning |## Outputs| Output | Description ||--------|-------------|| `findings-count` | Total number of issues found || `has-critical` | `true` if critical/high severity issues |## PhilosophyThis action **detects and alerts only**. It will:- Flag security issues in PR checks- Annotate specific lines with findings- Generate a summary reportIt will NOT:- Automatically modify your code- Quarantine or delete files- Make any changes to your repositoryFor automated remediation, see [OpenClaw Pro](https://github.com/sponsors/AtlasPA).## Requirements- Python 3.8+ (auto-installed by action)- No external dependencies

Frequently asked questions

Openclaw Action