How do I install the Clawshield skill?

Run npx skillmds@latest add modbender/clawshield in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Clawshield skill do?

OpenClaw security audit + prompt injection detector. Scans gateway/vulns/cron/PI patterns. Use for frenzy-proofing installs. It is listed under AI & ML on SkillMD.

Is Clawshield safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Clawshield?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Clawshield free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Clawshield?

modbender (@modbender) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Clawshield by modbender — Agent Skill

Name: Clawshield
Rating: 4.2 (5 reviews)
Author: modbender

File contents

ClawShield

Purpose

Audit a local OpenClaw install for security posture and common prompt-injection indicators. Produces a JSON report for review and alerting.

Workflow

Canvas present: Launch the panel server and present the UI.
User config: Update config.yaml (scan frequency, alerts, sensitivity).
Cron setup: Schedule scripts/audit.sh at the chosen cadence.
Report/Alert: Review JSON output and alert if prompt-injection hits or unexpected open ports are found.

Usage

Panel (recommended)

node scripts/panel-server.js

Then present the UI:

canvas.present → http://localhost:8133 (Scan / Settings / Logs)

Config (CLI)

node scripts/config.js get
node scripts/config.js set Scan_freq daily alerts telegram sensitivity high

Audit (CLI)

bash scripts/audit.sh > report.json

Notes

Local-only scans; no network calls outside localhost.
Panel server is local and stores the last report at logs/last-report.json.
config.yaml defaults: Scan_freq=daily, alerts=telegram, sensitivity=high.
Safe for routine security checks and “frenzy-proofing”.

Contact: Jeffrey Coleman | smallbizailab79@gmail.com | Custom audits/enterprise.

Frequently asked questions

Clawshield