clawsec-suite@0.1.16
VERIFIED· install onlyPublisher claims: "ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-11 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
`Warning: chmod 0600 failed for ${stateFile} (${code}). ` +Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.process.stdout.write(` install: npx clawhub@latest install ${skill.id}\n`);Fix: Pin versions and sources; vendor anything fetched at install time.chmod 600 "$DEST/skill.json"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.npx clawhub@latest install <skill-name>Fix: Pin versions and sources; vendor anything fetched at install time.find "$DEST" -type f ! -name "skill.json" -exec chmod 644 {} \;Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.-----END PUBLIC KEY-----Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.chmod 600 "$STATE_FILE"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.npx skills add prompt-security/clawsec --skill clawsec-suite -a openclaw -yFix: Pin versions and sources; vendor anything fetched at install time.- Side effects: setup scripts install an advisory hook under `~/.openclaw/hooks`, optionally create an unattended `openclaw cron` job, and use `npx clawhub@latest install` for guarded installsFix: Pin versions and sources; vendor anything fetched at install time.npx clawhub@latest install clawsec-suiteFix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.