# Openclaw Audit Watchdog

Automated daily security audits for OpenClaw agents with DM delivery and optional email...

- Repository: https://github.com/prompt-security/clawsec (1129 stars)
- Category: Security
- License: AGPL-3.0
- Last updated: 2026-11-01
- Runs scripts: yes, review before use

## Install

Claude Code: `npx skills add prompt-security/clawsec --skill openclaw-audit-watchdog -g -a claude-code -y`
Codex: `npx skills add prompt-security/clawsec --skill openclaw-audit-watchdog -g -a codex -y`
Cursor: `npx skills add prompt-security/clawsec --skill openclaw-audit-watchdog -g -a cursor -y`
Gemini CLI: `npx skills add prompt-security/clawsec --skill openclaw-audit-watchdog -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add prompt-security/clawsec`

## Description

Automated daily security audits for OpenClaw agents with DM delivery and optional email reporting. Runs deep audits, creates or updates a recurring cron job, and sends formatted reports to configured recipients.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Prompt Security Audit (openclaw)

## Vercel Skills Installation

Install with the Vercel Skills CLI for this harness:

```bash
npx skills add prompt-security/clawsec --skill openclaw-audit-watchdog -a openclaw -y
```

## Installation Options

You can get openclaw-audit-watchdog in two ways:

### Option A: Bundled with ClawSec Suite (Recommended)

**If you've installed clawsec-suite, you may already have this!**

Openclaw-audit-watchdog is bundled alongside ClawSec Suite to provide crucial automated security audit capabilities. When you install the suite, if you don't already have the audit watchdog installed, it will be deployed from the bundled copy.

**Advantages:**
- Convenient - no separate download needed
- Standard location - installed to `~/.openclaw/skills/openclaw-audit-watchdog/`
- Preserved - if you already have audit watchdog installed, it won't be overwritten
- Single verification - integrity checked as part of suite package

### Option B: Standalone Installation (This Page)

Install openclaw-audit-watchdog independently without the full suite.

**When to use standalone:**
- You only need the audit watchdog (not other suite components)
- You want to install before installing the suite
- You prefer explicit control over audit watchdog installation

**Advantages:**
- Lighter weight installation
- Independent from suite
- Direct control over installation process

Standalone installation usually involves a network download from the published GitHub release. Verify the release source and archive integrity before installing it on production hosts.

Continue below for standalone installation instructions.

---

## Release Artifact Verification

For standalone installs, verify the signed release manifest before trusting `SKILL.md`, `skill.json`, or the archive. The `skill.json` file is the package metadata/SBOM source, and the release pipeline signs `checksums.json` with the ClawSec release key.

```bash
set -euo pipefail

The rest: https://github.com/prompt-security/clawsec/blob/HEAD/skills/openclaw-audit-watchdog/SKILL.md