How do I install the Securityclaw Skill skill?

Run npx skillmds@latest add dvcrn/securityclaw-skill in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Securityclaw Skill safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Securityclaw Skill?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Securityclaw Skill free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Securityclaw Skill?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Securityclaw Skill by dvcrn — Agent Skill

Name: Securityclaw Skill
Rating: 4.2 (5 reviews)
Author: dvcrn

Securityclaw Skill

Security-first skill auditing and quarantine for OpenClaw skills. Use when installing new skills, reviewing skills from unknown sources, scanning skills for prompt injection/exfiltration/supply-chain risks, or when a bot suspects a skill is malicious. Guides static + optional sandbox checks, quarantines suspicious skills, and produces an owner-action checklist (Delete / Report / Allow / Scan all).

dvcrn Updated Sep 8, 2026 32 repo stars

File contents

SecurityClaw (Skill Scanner)

Use the scanner script

Run the scanner (read-only by default):

python3 scripts/securityclaw_scan.py --skills-dir ~/.openclaw/skills --out report.json

Quarantine anything suspicious (moves folders, no deletion):

python3 scripts/securityclaw_scan.py --skills-dir ~/.openclaw/skills --quarantine-dir ~/.openclaw/skills-quarantine --quarantine --out report.json

What to do when findings exist

If the report shows severity >= high for any skill:

Do not execute the skill.
Quarantine the skill folder.
Notify the owner with:
- skill name
- top reasons + file/line locations
- recommended action
Await owner instruction:
- Delete: remove quarantined skill
- Report: prepare public report / IOCs (no secrets)
- Allow: add allowlist entry and restore
- Scan all: deep scan everything

Optional: sandbox/dynamic checks (advanced)

Dynamic checks are optional and should run only after owner approval.

Prefer running unknown code with:
- no network egress
- read-only filesystem except a temp workspace
- no access to OpenClaw config/secrets

See references/sandboxing.md.

Files

scripts/securityclaw_scan.py — main scanner + quarantine
references/rules.md — rule catalog (what we flag and why)
references/sandboxing.md — safe sandbox strategy + what to avoid

Frequently asked questions