gnezim/clawsec
1
0
Fork 0
mirror of https://github.com/prompt-security/clawsec.git synced 2026-06-13 05:28:02 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): temporary clawhub publish workaround for MIT-0 consent (#117)

Browse Source 
* fix(ci): patch clawhub publish payload for temporary MIT-0 consent workaround

* fix(ci): make clawhub publish patch self-contained for tag republish

* fix(clawsec-nanoclaw): harden signature verification boundaries

* chore(clawsec-nanoclaw): bump version to 0.0.3

* fix(clawsec-nanoclaw): normalize integrity policy and baseline paths
This commit is contained in:
davida-ps
2026-03-09 19:30:22 +02:00
committed by GitHub
parent 19b53609c1
commit 81c2e60513
12 changed files with 394 additions and 111 deletions
Download Patch File Download Diff File Expand all files Collapse all files
skills/clawsec-nanoclaw/INSTALL.md
+2
View File
@@ -140,6 +140,8 @@ From within a NanoClaw agent session, the following tools should be available:
**Signature Verification** (mcp-tools/signature-verification.ts):
- `clawsec_verify_skill_package` - Verify Ed25519 signature on skill packages
- Uses pinned ClawSec public key (no runtime key override)
- Accepts staged package/signature paths only under `/tmp`, `/var/tmp`, `/workspace/ipc`, `/workspace/project/data`, `/workspace/project/tmp`, `/workspace/project/downloads`
**Integrity Monitoring** (mcp-tools/integrity-tools.ts):
- `clawsec_check_integrity` - Check protected files for unauthorized changes