ClawSec Scanner automates security analysis for agent skills and repositories. It runs dependency scans (npm audit, pip-audit), queries CVE providers (OSV, NVD, GitHub Advisory), performs static analysis with Semgrep/Bandit, and executes an agent-aware dynamic analysis harness for OpenClaw hooks. Results are normalized into a unified ScanReport JSON with severity summaries and remediation guidance.
Use ClawSec Scanner when auditing agent skills before deployment, during CI/CD checkpoints, or on a scheduled cadence to detect regressions. It's ideal for discovering vulnerable dependencies, hardcoded secrets, unsafe code patterns, and hook-specific runtime dangers in OpenClaw handlers.
Inferred support: agents and CLIs that can run subprocess tools (Node.js/python based workflows), e.g., OpenClaw gateway, Node-based agent runtimes, and CI environments.
This skill has not been reviewed by our automated audit pipeline yet.
