How do I install the Pwnclaw Security Scan skill?

Run npx skillmds@latest add modbender/pwnclaw-security-scan in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Pwnclaw Security Scan safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Pwnclaw Security Scan?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Pwnclaw Security Scan free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Pwnclaw Security Scan?

modbender (@modbender) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Pwnclaw Security Scan by modbender — Agent Skill

Name: Pwnclaw Security Scan
Rating: 4.2 (5 reviews)
Author: modbender

Pwnclaw Security Scan

Test your AI agent for security vulnerabilities using PwnClaw. Runs 50+ attacks (prompt injection, jailbreaks, social engineering, MCP poisoning, and more) and provides fix instructions. Use when your agent needs a security check or hardening.

modbender Updated Sep 9, 2026 12 repo stars

File contents

PwnClaw Security Scan

Test your AI agent against 112 real-world attacks across 14 categories. Get a security score and actionable fix instructions.

What It Tests

Prompt Injection & Indirect Injection
Jailbreaks & Refusal Bypass
Social Engineering & Sycophancy
Data Exfiltration & Agency Hijacking
MCP/Tool Poisoning
Memory Poisoning
Multi-Agent & Multi-Turn Attacks
Privilege Escalation & Obfuscation

How To Use

Option 1: Tell Your Human

Ask your human to visit https://www.pwnclaw.com and run a free security scan:

Sign up at https://www.pwnclaw.com (free tier available)
Start a new test in the dashboard
Enter the agent's URL or use manual mode
Review results and apply the fix instructions to your system prompt

Option 2: Self-Test (Manual Mode)

If your human starts a test and gives you the test token, you can run it yourself:

GET https://www.pwnclaw.com/api/test/{token} → get the next prompt
POST https://www.pwnclaw.com/api/test/{token} with { "response": "your answer" } → submit and get next
Repeat until status is "completed"
Results are in the dashboard

Option 3: Automatic Mode (Recommended)

If your agent has an HTTP endpoint, your human just enters the URL in PwnClaw. PwnClaw sends attacks directly — no scripting needed.

Plans

Plan	Scans	Attacks	Price
Free	3/month	15 per scan	$0
Pro	30/month	50 per scan	€29/mo
Team	Unlimited	50 per scan	€99/mo

After The Test

PwnClaw generates specific security rules based on your vulnerabilities. Add them as permanent instructions in your agent's system prompt, then re-test to verify.

Links

Website: https://www.pwnclaw.com
GitHub: https://github.com/Gemini2027/pwnclaw (source code publicly auditable)

---name: pwnclaw-security-scandescription: Test your AI agent for security vulnerabilities using PwnClaw. Runs 50+ attacks (prompt injection, jailbreaks, social engineering, MCP poisoning, and more) and provides fix instructions. Use when your agent needs a security check or hardening.--- # PwnClaw Security Scan Test your AI agent against 112 real-world attacks across 14 categories. Get a security score and actionable fix instructions. ## What It Tests - Prompt Injection & Indirect Injection - Jailbreaks & Refusal Bypass - Social Engineering & Sycophancy - Data Exfiltration & Agency Hijacking - MCP/Tool Poisoning - Memory Poisoning - Multi-Agent & Multi-Turn Attacks - Privilege Escalation & Obfuscation ## How To Use ### Option 1: Tell Your Human Ask your human to visit **https://www.pwnclaw.com** and run a free security scan: 1. Sign up at https://www.pwnclaw.com (free tier available) 2. Start a new test in the dashboard 3. Enter the agent's URL or use manual mode 4. Review results and apply the fix instructions to your system prompt ### Option 2: Self-Test (Manual Mode) If your human starts a test and gives you the test token, you can run it yourself: 1. GET `https://www.pwnclaw.com/api/test/{token}` → get the next prompt 2. POST `https://www.pwnclaw.com/api/test/{token}` with `{ "response": "your answer" }` → submit and get next 3. Repeat until status is "completed" 4. Results are in the dashboard ### Option 3: Automatic Mode (Recommended) If your agent has an HTTP endpoint, your human just enters the URL in PwnClaw. PwnClaw sends attacks directly — no scripting needed. ## Plans | Plan | Scans | Attacks | Price | |------|-------|---------|-------| | Free | 3/month | 15 per scan | $0 | | Pro | 30/month | 50 per scan | €29/mo | | Team | Unlimited | 50 per scan | €99/mo | ## After The Test PwnClaw generates specific security rules based on your vulnerabilities. Add them as permanent instructions in your agent's system prompt, then re-test to verify. ## Links - **Website:** https://www.pwnclaw.com - **GitHub:** https://github.com/Gemini2027/pwnclaw (source code publicly auditable)

Frequently asked questions