Skip to content

clawsec-suite 0.1.16

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 12:16
· 19 commits to main since this release
clawsec-suite-v0.1.16
1c44110
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

clawsec-suite 0.1.16

Fixed

  • Preserved the release-path policy helper required by the manual ClawHub republish flow after it checks out a release tag.
  • Published the corrected signed Suite package under a new immutable version instead of attempting to replace the existing 0.1.15 registry entry.

Changed

  • Added dependency-closure coverage for every current workflow helper carried across the tag-checkout boundary.
  • Kept tests and other excluded development files out of the ClawHub package while retaining the five signed advisory trust artifacts.

Agent Skills CLI

Codex global install:

npx skills add prompt-security/clawsec --skill clawsec-suite --agent codex --global --yes

OpenClaw global install:

npx skills add prompt-security/clawsec --skill clawsec-suite --agent openclaw --global --yes

Update an installed skill:

npx skills update clawsec-suite

Quick Install

Via ClawHub (recommended):

npx clawhub@latest install clawsec-suite

If you already have clawsec-suite installed:
Ask your agent to pull clawsec-suite from the ClawSec catalog and it will handle setup and verification automatically.

Manual download with verification:

# 1. Download the release archive, checksums, and signing material
curl -sLO https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v0.1.16/clawsec-suite-v0.1.16.zip
curl -sLO https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v0.1.16/checksums.json
curl -sLO https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v0.1.16/checksums.sig
curl -sLO https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v0.1.16/signing-public.pem

# 2. Verify the checksums manifest signature (Ed25519)
openssl base64 -d -A -in checksums.sig -out checksums.sig.bin
openssl pkeyutl -verify -rawin -pubin -inkey signing-public.pem -sigfile checksums.sig.bin -in checksums.json

# 3. Verify archive checksum from the signed manifest
echo "$(jq -r '.archive.sha256' checksums.json)  clawsec-suite-v0.1.16.zip" | sha256sum -c

# 4. Extract (creates clawsec-suite/ directory)
unzip clawsec-suite-v0.1.16.zip

SkillSpector Security Report

Skill: clawsec-suite
Source: /tmp/tmp.ItqWknoGXH/clawsec-suite
Scanned: 2026-07-14 12:16:29 UTC

Risk Assessment

Metric Value
Score 67/100
Severity HIGH
Recommendation DO NOT INSTALL

Components (28)

File Type Lines Executable
CHANGELOG.md markdown 273 No
HEARTBEAT.md markdown 224 No
SKILL.md markdown 416 No
advisories/checksums.json json 24 No
advisories/checksums.json.sig other 1 No
advisories/feed-signing-public.pem other 3 No
advisories/feed.json json 26360 No
advisories/feed.json.sig other 1 No
hooks/clawsec-advisory-guardian/HOOK.md markdown 40 No
hooks/clawsec-advisory-guardian/handler.ts typescript 253 Yes
hooks/clawsec-advisory-guardian/lib/advisory_scope.mjs other 48 No
hooks/clawsec-advisory-guardian/lib/feed.mjs other 567 No
hooks/clawsec-advisory-guardian/lib/local_file_io.mjs other 5 No
hooks/clawsec-advisory-guardian/lib/matching.ts typescript 155 Yes
hooks/clawsec-advisory-guardian/lib/state.ts typescript 74 Yes
hooks/clawsec-advisory-guardian/lib/suppression.mjs other 144 No
hooks/clawsec-advisory-guardian/lib/types.ts typescript 54 Yes
hooks/clawsec-advisory-guardian/lib/utils.mjs other 135 No
hooks/clawsec-advisory-guardian/lib/version.mjs other 251 No
scripts/discover_skill_catalog.mjs other 314 No
scripts/generate_checksums_json.mjs other 85 No
scripts/guarded_skill_install.mjs other 279 No
scripts/local_file_io.mjs other 5 No
scripts/setup_advisory_cron.mjs other 136 No
scripts/setup_advisory_hook.mjs other 102 No
scripts/sign_detached_ed25519.mjs other 65 No
scripts/verify_detached_ed25519.mjs other 73 No
skill.json json 293 No

Issues (15)

🟡 MEDIUM: LP3

Location: SKILL.md:1
Confidence: 70%

Message: Skill has no declared permissions but code capabilities were detected: env, shell.

Remediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires.

🟡 MEDIUM: RP1

Location: SKILL.md:19
Confidence: 70%

Message: MCP server referenced without pinned version: 'npx skills'.

Remediation: Pin the version: npx @scope/server@1.2.3

🟡 MEDIUM: RP1

Location: SKILL.md:25
Confidence: 70%

Message: MCP server referenced without pinned version: 'npx clawhub'.

Remediation: Pin the version: npx @scope/server@1.2.3

🟡 MEDIUM: RP1

Location: SKILL.md:74
Confidence: 70%

Message: MCP server referenced without pinned version: 'npx clawhub'.

Remediation: Pin the version: npx @scope/server@1.2.3

🟡 MEDIUM: RP1

Location: SKILL.md:400
Confidence: 70%

Message: MCP server referenced without pinned version: 'npx clawhub'.

Remediation: Pin the version: npx @scope/server@1.2.3

🟡 MEDIUM: RP1

Location: advisories/feed.json:24183
Confidence: 75%

Message: Docker image referenced without tag or digest: 'docker run --rm'.

Remediation: Pin the image: image:tag or image@sha256:abc123

🟡 MEDIUM: RP1

Location: scripts/discover_skill_catalog.mjs:267
Confidence: 70%

Message: MCP server referenced without pinned version: 'npx clawhub'.

Remediation: Pin the version: npx @scope/server@1.2.3

🟡 MEDIUM: E1

Location: SKILL.md:108
Confidence: 60%

Message: External Transmission

Remediation: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

🟡 MEDIUM: PE2

Location: HEARTBEAT.md:83
Confidence: 80%

Message: Sudo/Root Execution

Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.

🟡 MEDIUM: PE2

Location: SKILL.md:148
Confidence: 80%

Message: Sudo/Root Execution

Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.

🟡 MEDIUM: PE2

Location: SKILL.md:149
Confidence: 80%

Message: Sudo/Root Execution

Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.

🟡 MEDIUM: PE2

Location: SKILL.md:246
Confidence: 80%

Message: Sudo/Root Execution

Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.

🟡 MEDIUM: PE2

Location: hooks/clawsec-advisory-guardian/lib/state.ts:67
Confidence: 80%

Message: Sudo/Root Execution

Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.

🟡 MEDIUM: RA2

Location: SKILL.md:144
Confidence: 60%

Message: Session Persistence

Remediation: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.

🔴 HIGH: RA1

Location: skill.json:290
Confidence: 85%

Message: Self-Modification

Remediation: Prevent the skill from modifying its own code, SKILL.md, or configuration files. Treat skill files as read-only at runtime.

Metadata

  • Executable Scripts: Yes

Generated by SkillSpector v2.3.12

Download the generated release-payload scan: skillspector-report.md

Verification

checksums.json is cryptographically signed (checksums.sig) using the ClawSec CI signing key.
Verify the signature first, then trust hashes from checksums.json:

curl -sLO https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v0.1.16/checksums.json
curl -sLO https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v0.1.16/checksums.sig
curl -sLO https://github.com/prompt-security/clawsec/releases/download/clawsec-suite-v0.1.16/signing-public.pem
openssl base64 -d -A -in checksums.sig -out checksums.sig.bin
openssl pkeyutl -verify -rawin -pubin -inkey signing-public.pem -sigfile checksums.sig.bin -in checksums.json

Files

See checksums.json for the complete file manifest with SHA256 hashes.
The zip archive preserves the full directory structure of the skill.

Released by ClawSec skill distribution pipeline

Assets 13
Loading