Compare commits

...

2 Commits

Author SHA1 Message Date
David Abutbul ea7212abf3 docs(readme): include full published skills catalog 2026-03-09 22:09:50 +02:00
davida-ps 83ce1d0bf5 fix(release): enforce changelog match for tagged skill releases (#118) 2026-03-09 21:30:52 +02:00
3 changed files with 33 additions and 23 deletions
+13 -13
View File
@@ -852,9 +852,8 @@ jobs:
VERSION="${{ steps.parse.outputs.version }}"
if [ ! -f "$SKILL_PATH/CHANGELOG.md" ]; then
echo "No CHANGELOG.md found"
echo "changelog=" >> $GITHUB_OUTPUT
exit 0
echo "::error::Missing required changelog file: $SKILL_PATH/CHANGELOG.md"
exit 1
fi
# Extract the changelog section for this version
@@ -868,18 +867,19 @@ jobs:
' "$SKILL_PATH/CHANGELOG.md" | sed -e :a -e '/^\n*$/{$d;N;ba' -e '}')
if [ -z "$CHANGELOG_ENTRY" ]; then
echo "No changelog entry found for version $VERSION"
echo "changelog=" >> $GITHUB_OUTPUT
else
echo "Found changelog entry for version $VERSION"
# Use multiline output format for GitHub Actions
{
echo "changelog<<EOF"
echo "$CHANGELOG_ENTRY"
echo "EOF"
} >> $GITHUB_OUTPUT
echo "::error::No changelog entry found for version $VERSION in $SKILL_PATH/CHANGELOG.md"
echo "::error::Expected heading format: ## [$VERSION] - YYYY-MM-DD"
exit 1
fi
echo "Found changelog entry for version $VERSION"
# Use multiline output format for GitHub Actions
{
echo "changelog<<EOF"
echo "$CHANGELOG_ENTRY"
echo "EOF"
} >> $GITHUB_OUTPUT
- name: Create GitHub Release
uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
with:
+19 -9
View File
@@ -159,14 +159,22 @@ See [`skills/clawsec-nanoclaw/INSTALL.md`](skills/clawsec-nanoclaw/INSTALL.md) f
The **clawsec-suite** is a skill-of-skills manager that installs, verifies, and maintains security skills from the ClawSec catalog.
### Skills in the Suite
### Skills in the ClawSec Catalog
All currently published skills in this repository:
| Skill | Description | Installation | Compatibility |
|-------|-------------|--------------|---------------|
| 📡 **clawsec-feed** | Security advisory feed monitoring with live CVE updates | ✅ Included by default | All agents |
| 📦 **clawsec-suite** | Suite manager with advisory monitoring, signature verification, and guarded skill install flows | `npx clawhub@latest install clawsec-suite` | OpenClaw/MoltBot/Clawdbot |
| 📡 **clawsec-feed** | Security advisory feed monitoring with live CVE updates | ✅ Included by default via `clawsec-suite` | All agents |
| 🧪 **clawsec-clawhub-checker** | ClawHub reputation checker with VirusTotal Code Insight integration | ⚙️ Optional (install separately) | OpenClaw/MoltBot/Clawdbot |
| 🔍 **clawsec-scanner** | Automated vulnerability scanner (dependency scan, CVE enrichment, SAST, basic DAST) | ⚙️ Optional (install separately) | Agent platforms (OpenClaw first-class support) |
| 📱 **clawsec-nanoclaw** | NanoClaw security suite with MCP tools, advisory checks, and signature verification | ⚙️ Optional (install separately) | NanoClaw |
| 👻 **soul-guardian** | Drift detection and file integrity guard with auto-restore | ⚙️ Optional (install separately) | All agents |
| 🔭 **openclaw-audit-watchdog** | Automated daily audits with email reporting | ⚙️ Optional (install separately) | OpenClaw/MoltBot/Clawdbot |
| 👻 **soul-guardian** | Drift detection and file integrity guard with auto-restore | ⚙️ Optional | All agents |
| 🤝 **clawtributor** | Community incident reporting | ❌ Optional (Explicit request) | All agents |
| 🧠 **prompt-agent** | Security audit enforcement and prompt hardening workflows | ⚙️ Optional (install separately) | Agent platforms |
| 🚀 **claw-release** | Release automation for Claw skills and website | ⚙️ Optional (install separately) | Maintainer workflow tooling |
> ⚠️ **clawtributor** is not installed by default as it may share anonymized incident data. Install only on explicit user request.
@@ -433,14 +441,16 @@ npm run build
│ ├── populate-local-wiki.sh # Local wiki llms export populator
│ └── release-skill.sh # Manual skill release helper
├── skills/
│ ├── clawsec-suite/ # 📦 Suite installer (skill-of-skills)
│ ├── clawsec-feed/ # 📡 Advisory feed skill
│ ├── clawsec-nanoclaw/ # 📱 NanoClaw platform security suite
│ ├── clawsec-suite/ # 📦 Suite installer (skill-of-skills)
│ ├── clawsec-feed/ # 📡 Advisory feed skill
│ ├── clawsec-clawhub-checker/ # 🧪 ClawHub reputation checks
│ ├── clawtributor/ # 🤝 Community reporting skill
│ ├── clawsec-scanner/ # 🔍 Automated vulnerability scanner
│ ├── clawsec-nanoclaw/ # 📱 NanoClaw platform security suite
│ ├── soul-guardian/ # 👻 File integrity skill
│ ├── openclaw-audit-watchdog/ # 🔭 Automated audit skill
│ ├── prompt-agent/ # 🧠 Prompt-focused protection workflows
── soul-guardian/ # 👻 File integrity skill
│ ├── clawtributor/ # 🤝 Community reporting skill
── prompt-agent/ # 🧠 Prompt-focused protection workflows
│ └── claw-release/ # 🚀 Release automation skill
├── utils/
│ ├── package_skill.py # Skill packager utility
│ └── validate_skill.py # Skill validator utility
+1 -1
View File
@@ -5,7 +5,7 @@ All notable changes to the ClawSec Scanner will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## [0.1.0] - 2026-02-27
## [0.0.1] - 2026-02-27
### Added