# Clawsec Feed

Security advisory feed package for OpenClaw-related threats and vulnerabilities.

- Repository: https://github.com/prompt-security/clawsec (1129 stars)
- Category: Security
- License: AGPL-3.0
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add prompt-security/clawsec --skill clawsec-feed -g -a claude-code -y`
Codex: `npx skills add prompt-security/clawsec --skill clawsec-feed -g -a codex -y`
Cursor: `npx skills add prompt-security/clawsec --skill clawsec-feed -g -a cursor -y`
Gemini CLI: `npx skills add prompt-security/clawsec --skill clawsec-feed -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add prompt-security/clawsec`

## Description

Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# ClawSec Feed 📡

Security advisory feed monitoring for AI agents. Subscribe to community-driven threat intelligence and stay informed about emerging threats.

The default `feed.json` is the consolidated agent feed. It includes NVD CVEs, approved community advisories, and provisional GitHub Security Advisories that do not have CVE IDs yet.

## Vercel Skills Installation

Install with the Vercel Skills CLI for this harness:

```bash
npx skills add prompt-security/clawsec --skill clawsec-feed -a openclaw -y
```

## Operational Notes

- Required runtime for standalone installation: `bash`, `curl`, `jq`, `shasum`, `unzip`
- Side effects: standalone install only writes local skill files
- Network behavior: downloads release metadata/artifacts and, if you choose to poll manually, fetches the advisory feed
- Trust model: this package does not itself create cron jobs or submit data externally; automation is delegated to `clawsec-suite` or your own scheduler

**An open source project by [Prompt Security](https://prompt.security)**

---

## Installation Options

You can get clawsec-feed in two ways:

### Option A: Bundled with ClawSec Suite (Recommended)

**If you've installed clawsec-suite, you may already have this!**

ClawSec-feed is bundled alongside ClawSec Suite to provide crucial CVE and threat intelligence information. When you install the suite, if you don't already have the feed installed, it will be deployed from the bundled copy.

**Advantages:**
- Convenient - no separate download needed
- Standard location - installed to `~/.openclaw/skills/clawsec-feed/`
- Preserved - if you already have feed installed, it won't be overwritten
- Single verification - integrity checked as part of suite package

### Option B: Standalone Installation (This Page)

Install clawsec-feed independently without the full suite.

The rest: https://github.com/prompt-security/clawsec/blob/HEAD/skills/clawsec-feed/SKILL.md