chore(clawsec-clawhub-checker): bump version to 0.0.1

feat: add input validation for skill slug and version in check_clawhub_reputation.mjs
fix: enhance argument parsing in enhanced_guarded_install.mjs
test: add reputation check tests for input validation and output formatting
chore: delete unused update_suite_catalog.mjs script

.gitattributes

@@ -1,24 +0,0 @@
-* text=auto
-
-# Keep executable/script sources LF across platforms.
-*.sh text eol=lf
-*.bash text eol=lf
-*.zsh text eol=lf
-*.mjs text eol=lf
-*.js text eol=lf
-*.ts text eol=lf
-*.tsx text eol=lf
-*.py text eol=lf
-
-# Keep config/docs deterministic in CI and local tooling.
-*.md text eol=lf
-*.json text eol=lf
-*.yml text eol=lf
-*.yaml text eol=lf
-*.toml text eol=lf
-*.pem text eol=lf
-
-# Binary assets.
-*.png binary
-*.ico binary
-*.ttf binary

.github/codeql/codeql-config.yml

@@ -1,4 +0,0 @@
-name: "ClawSec CodeQL Config"
-
-paths-ignore:
-  - dist/**

.github/requirements-lint-python.txt

@@ -1,2 +1,2 @@
-ruff==0.15.13
-bandit==1.9.4
+ruff==0.15.1
+bandit==1.9.3

.github/workflows/archive-traffic.yml

@@ -1,74 +0,0 @@
-name: Archive GitHub Traffic
-
-on:
-  schedule:
-    - cron: '17 3 * * *'
-  workflow_dispatch:
-
-permissions:
-  contents: write
-
-concurrency:
-  group: traffic-archive
-  cancel-in-progress: false
-
-env:
-  TRAFFIC_ARCHIVE_BRANCH: traffic-archive
-  TRAFFIC_ARCHIVE_DIR: ../traffic-archive/traffic
-
-jobs:
-  archive:
-    name: Capture traffic snapshot
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout source
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Setup Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - name: Prepare archive branch
-        env:
-          ARCHIVE_PUSH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-
-          git config --global user.name "github-actions[bot]"
-          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
-
-          server="${GITHUB_SERVER_URL#https://}"
-          archive_remote="https://x-access-token:${ARCHIVE_PUSH_TOKEN}@${server}/${GITHUB_REPOSITORY}.git"
-
-          if git ls-remote --exit-code --heads "${archive_remote}" "${TRAFFIC_ARCHIVE_BRANCH}" >/dev/null 2>&1; then
-            git clone --branch "${TRAFFIC_ARCHIVE_BRANCH}" --depth 1 "${archive_remote}" ../traffic-archive
-          else
-            git init -b "${TRAFFIC_ARCHIVE_BRANCH}" ../traffic-archive
-            git -C ../traffic-archive remote add origin "${archive_remote}"
-          fi
-
-          mkdir -p "${TRAFFIC_ARCHIVE_DIR}"
-
-      - name: Collect traffic
-        env:
-          GH_TRAFFIC_TOKEN: ${{ secrets.TRAFFIC_ARCHIVE_TOKEN || github.token }}
-          GITHUB_REPOSITORY: ${{ github.repository }}
-        run: node scripts/archive-github-traffic.mjs --archive-dir "${TRAFFIC_ARCHIVE_DIR}"
-
-      - name: Commit archive
-        run: |
-          set -euo pipefail
-
-          cd ../traffic-archive
-          git add traffic/archive.json traffic/summary.json
-          git rm --ignore-unmatch traffic/README.md
-
-          if git diff --cached --quiet; then
-            echo "No traffic archive changes."
-            exit 0
-          fi
-
-          git commit -m "chore(traffic): archive repository traffic $(date -u +%F)"
-          git push origin HEAD:${TRAFFIC_ARCHIVE_BRANCH}

.github/workflows/ci.yml

@@ -3,24 +3,18 @@ name: CI
 on:
   pull_request:
     branches: [main]
-  workflow_dispatch:
+  push:
+    branches: [main]
 
 permissions: read-all
 
 jobs:
   lint-typescript:
-    name: Lint TypeScript/React (${{ matrix.os }})
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        os:
-          - ubuntu-latest
-          - macos-latest
-          - windows-latest
+    name: Lint TypeScript/React
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: '20'
           cache: 'npm'
@@ -30,7 +24,6 @@ jobs:
       - name: TypeScript Check
         run: npx tsc --noEmit
       - name: Build Check
-        if: matrix.os == 'ubuntu-latest'
         run: npm run build
 
   lint-python:
@@ -63,7 +56,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Trivy FS Scan
-        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # 0.34.1
+        uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # 0.34.0
         with:
           scan-type: 'fs'
           scan-ref: '.'
@@ -71,7 +64,7 @@ jobs:
           exit-code: '1'
           ignore-unfixed: true
       - name: Trivy Config Scan
-        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # 0.34.1
+        uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # 0.34.0
         with:
           scan-type: 'config'
           scan-ref: '.'
@@ -83,7 +76,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: '20'
           cache: 'npm'
@@ -93,69 +86,15 @@ jobs:
       - name: Check for outdated deps
         run: npm outdated || true
 
-  advisory-feed-tests:
-    name: Advisory Feed Tests
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version: '20'
-          cache: 'npm'
-      - run: npm ci
-      - name: GHSA Without CVE Feed Tests
-        run: node scripts/test-ghsa-without-cve-feed.mjs
-      - name: GHSA Poll Workflow Tests
-        run: node scripts/test-ghsa-poll-workflow.mjs
-      - name: NVD GHSA Consolidation Workflow Tests
-        run: node scripts/test-nvd-ghsa-consolidation-workflow.mjs
-      - name: NVD + GHSA Pipeline Dry Run
-        run: node scripts/test-nvd-ghsa-pipeline-dry-run.mjs
-      - name: Skill Release Workflow Tests
-        run: node scripts/test-skill-release-workflow.mjs
-      - name: Deploy Pages Advisory Checksums Tests
-        run: node scripts/test-deploy-pages-checksums.mjs
-      - name: GitHub Traffic Archive Tests
-        run: node scripts/test-github-traffic-archive.mjs
-
   clawsec-suite-tests:
     name: ClawSec Suite Verification Tests
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: '20'
-          cache: 'npm'
-      - run: npm ci
       - name: Feed Verification Tests
         run: node skills/clawsec-suite/test/feed_verification.test.mjs
       - name: Guarded Install Tests
         run: node skills/clawsec-suite/test/guarded_install.test.mjs
-      - name: Advisory Suppression Tests
-        run: node skills/clawsec-suite/test/advisory_suppression.test.mjs
-      - name: Path Resolution Tests
-        run: node skills/clawsec-suite/test/path_resolution.test.mjs
-      - name: Fuzz Property Tests
-        run: node skills/clawsec-suite/test/fuzz_properties.test.mjs
-      - name: Semver/Scope/Suppression Fuzz Tests
-        run: node skills/clawsec-suite/test/fuzz_semver_scope_suppression.test.mjs
-      - name: Advisory Application Scope Tests
-        run: node skills/clawsec-suite/test/advisory_application_scope.test.mjs
-
-  openclaw-audit-watchdog-tests:
-    name: OpenClaw Audit Watchdog Tests
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version: '20'
-          cache: 'npm'
-      - run: npm ci
-      - name: Suppression Config Tests
-        run: node skills/openclaw-audit-watchdog/test/suppression_config.test.mjs
-      - name: Suppression Config Fuzz Tests
-        run: node skills/openclaw-audit-watchdog/test/suppression_config_fuzz.test.mjs
-      - name: Render Report Suppression Tests
-        run: node skills/openclaw-audit-watchdog/test/render_report_suppression.test.mjs

.github/workflows/codeql.yml

@@ -1,9 +1,10 @@
 name: CodeQL
 
 on:
+  push:
+    branches: [main]
   pull_request:
     branches: [main]
-  workflow_dispatch:
   schedule:
     - cron: "17 3 * * 1"
 
@@ -27,10 +28,9 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+        uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4
         with:
           languages: ${{ matrix.language }}
-          config-file: ./.github/codeql/codeql-config.yml
 
       - name: Install dependencies
         run: npm ci
@@ -38,4 +38,4 @@ jobs:
       - name: Build project
         run: npm run build
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+        uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4

.github/workflows/community-advisory.yml

@@ -20,6 +20,10 @@ jobs:
   process-advisory:
     if: github.event.label.name == 'advisory-approved'
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -113,32 +117,6 @@ jobs:
           fi
           echo "Affected: $AFFECTED"
 
-          # Build platforms array
-          OPENCLAW_SELECTED="false"
-          if echo "$ISSUE_BODY" | grep -qi '^[[:space:]]*-[[:space:]]*\[[xX]\][[:space:]]*OpenClaw'; then
-            OPENCLAW_SELECTED="true"
-          fi
-
-          OTHER_PLATFORM_RAW=$(echo "$ISSUE_BODY" | sed -n 's/^[[:space:]]*-[[:space:]]*\[[xX]\][[:space:]]*Other:[[:space:]]*\(.*\)$/\1/p' | head -1 | xargs)
-          OTHER_PLATFORM=""
-          if [ -n "$OTHER_PLATFORM_RAW" ]; then
-            OTHER_PLATFORM=$(echo "$OTHER_PLATFORM_RAW" | tr '[:upper:]' '[:lower:]' | sed -E 's/[^a-z0-9._-]+/-/g; s/^-+//; s/-+$//')
-            if echo "$OTHER_PLATFORM" | grep -q 'nanoclaw'; then
-              OTHER_PLATFORM="nanoclaw"
-            fi
-          fi
-
-          PLATFORMS=$(jq -n --arg open "$OPENCLAW_SELECTED" --arg other "$OTHER_PLATFORM" '
-            [
-              (if $open == "true" then "openclaw" else empty end),
-              (if ($other | length) > 0 then $other else empty end)
-            ] | unique
-          ')
-          if [ "$PLATFORMS" = "[]" ]; then
-            PLATFORMS='["openclaw","nanoclaw"]'
-          fi
-          echo "Platforms: $PLATFORMS"
-
           # Parse recommended action
           ACTION=$(echo "$ISSUE_BODY" | sed -n '/^## Recommended Action/,/^---/p' | grep -v '^## Recommended Action' | grep -v '^---' | grep -v '^<!--' | sed '/^\s*$/d' | tr '\n' ' ' | xargs)
           if [ -z "$ACTION" ]; then
@@ -164,7 +142,6 @@ jobs:
             --arg title "$TITLE" \
             --arg description "$DESCRIPTION" \
             --argjson affected "$AFFECTED" \
-            --argjson platforms "$PLATFORMS" \
             --arg action "$ACTION" \
             --arg published "$PUBLISHED" \
             --arg source "Community Report" \
@@ -178,7 +155,6 @@ jobs:
               title: $title,
               description: $description,
               affected: $affected,
-              platforms: $platforms,
               action: $action,
               published: $published,
               references: [],
@@ -193,27 +169,6 @@ jobs:
           echo "Created advisory JSON:"
           cat tmp_advisory.json
 
-      - name: Set up Python for exploitability analysis
-        if: steps.parse.outputs.already_exists != 'true'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
-        with:
-          python-version: '3.10'
-
-      - name: Analyze exploitability for community advisory
-        if: steps.parse.outputs.already_exists != 'true'
-        run: |
-          set -euo pipefail
-
-          echo "=== Analyzing exploitability for community advisory ==="
-
-          scripts/ci/enrich_exploitability.sh \
-            --mode single \
-            --input tmp_advisory.json \
-            --output tmp_advisory.json
-
-          echo "=== Exploitability analysis complete ==="
-          echo "Exploitability score: $(jq -r '.exploitability_score // "unknown"' tmp_advisory.json)"
-
       - name: Update feed
         if: steps.parse.outputs.already_exists != 'true'
         run: |
@@ -261,21 +216,12 @@ jobs:
         if: steps.parse.outputs.already_exists != 'true'
         run: cp "$FEED_SIG_PATH" "$SKILL_FEED_SIG_PATH"
 
-      - name: Require automation token for write operations
-        env:
-          AUTOMATION_TOKEN: ${{ secrets.POLL_NVD_CVES_PAT }}
-        run: |
-          if [ -z "$AUTOMATION_TOKEN" ]; then
-            echo "::error::Set POLL_NVD_CVES_PAT with repo write permissions."
-            exit 1
-          fi
-
       - name: Create Pull Request
         if: steps.parse.outputs.already_exists != 'true'
         id: create-pr
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
         with:
-          token: ${{ secrets.POLL_NVD_CVES_PAT }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           branch: automated/community-advisory-${{ github.event.issue.number }}
           delete-branch: true
           title: "chore: add community advisory ${{ steps.parse.outputs.advisory_id }}"
@@ -302,9 +248,8 @@ jobs:
 
       - name: Comment on issue
         if: steps.parse.outputs.already_exists != 'true'
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
-          github-token: ${{ secrets.POLL_NVD_CVES_PAT }}
           script: |
             const advisoryId = '${{ steps.parse.outputs.advisory_id }}';
             const pullRequestUrl = '${{ steps.create-pr.outputs.pull-request-url }}';
@@ -328,9 +273,8 @@ jobs:
 
       - name: Comment if already exists
         if: steps.parse.outputs.already_exists == 'true'
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
-          github-token: ${{ secrets.POLL_NVD_CVES_PAT }}
           script: |
             const advisoryId = '${{ steps.parse.outputs.advisory_id }}';
             await github.rest.issues.createComment({

.github/workflows/deploy-pages.yml

@@ -1,11 +1,10 @@
 name: Deploy to GitHub Pages
 
 on:
-  push:
-    branches: [main]
   workflow_run:
-    workflows: ["Skill Release"]
+    workflows: ["CI", "Skill Release"]
     types: [completed]
+    # Note: No branch restriction - must trigger on both main branch CI runs AND tag-based Skill Releases
   workflow_dispatch:
 
 permissions:
@@ -20,20 +19,8 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
-    # Production build only: manual dispatch, push to main, or trusted release workflows.
-    # PR validation runs in .github/workflows/pages-verify.yml.
-    if: |
-      github.event_name == 'workflow_dispatch' ||
-      (
-        github.event_name == 'push' &&
-        github.ref_name == 'main'
-      ) ||
-      (
-        github.event_name == 'workflow_run' &&
-        github.event.workflow_run.conclusion == 'success' &&
-        github.event.workflow_run.name == 'Skill Release' &&
-        github.event.workflow_run.event != 'pull_request'
-      )
+    # Only run if workflow_dispatch OR the triggering workflow succeeded
+    if: github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success'
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -183,36 +170,16 @@ jobs:
                 done
 
                 # Build skill entry for index
-                SKILL_DATA=$(jq -c --arg tag "$TAG" '
-                  . as $skill |
-                  def object_or_empty($value):
-                    if ($value | type) == "object" then $value else {} end;
-                  def object_field($name):
-                    object_or_empty($skill[$name]?);
-                  def platform_meta:
-                    ($skill.platform as $platform
-                      | if ($platform | type) == "string" then object_or_empty($skill[$platform]?)
-                        else {}
-                        end);
-                  def platform_list:
-                    ([]
-                      + (if ($skill.platforms | type) == "array" then $skill.platforms else [] end)
-                      + (if ($skill.platform | type) == "string" then [$skill.platform] else [] end)
-                      + (["openclaw", "hermes", "nanoclaw", "picoclaw"] | map(select((object_field(.) | length) > 0))))
-                    | map(select(type == "string") | ascii_downcase)
-                    | unique;
-                  {
-                    id: .name,
-                    name: .name,
-                    version: .version,
-                    description: .description,
-                    emoji: (platform_meta.emoji // object_field("openclaw").emoji // object_field("hermes").emoji // object_field("nanoclaw").emoji // object_field("picoclaw").emoji // "📦"),
-                    category: (platform_meta.category // object_field("openclaw").category // object_field("hermes").category // object_field("nanoclaw").category // object_field("picoclaw").category // "utility"),
-                    platforms: platform_list,
-                    trust: .trust.level,
-                    tag: $tag
-                  }
-                ' "$MIRROR_DIR/skill.json")
+                SKILL_DATA=$(jq -c --arg tag "$TAG" '{
+                  id: .name,
+                  name: .name,
+                  version: .version,
+                  description: .description,
+                  emoji: .openclaw.emoji,
+                  category: .openclaw.category,
+                  trust: .trust.level,
+                  tag: $tag
+                }' "$MIRROR_DIR/skill.json")
 
                 # Append to index (handle first entry without comma)
                 if [ -f "public/skills/.first_done" ]; then
@@ -249,51 +216,16 @@ jobs:
           set -euo pipefail
           mkdir -p public/advisories
           cp advisories/feed.json public/advisories/feed.json
-          if [ -f advisories/ghsa-without-cve.json ]; then
-            cp advisories/ghsa-without-cve.json public/advisories/ghsa-without-cve.json
-          fi
           echo "Copied advisory feed to public/advisories/"
           cat public/advisories/feed.json | jq '.advisories | length' | xargs -I {} echo "Feed contains {} advisories"
-          if [ -f public/advisories/ghsa-without-cve.json ]; then
-            cat public/advisories/ghsa-without-cve.json | jq '.advisories | length' | xargs -I {} echo "GHSA provisional feed contains {} advisories"
-          fi
-
-      - name: Sign advisory feed and verify
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY }}
-          private_key_passphrase: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY_PASSPHRASE }}
-          input_file: public/advisories/feed.json
-          signature_file: public/advisories/feed.json.sig
-          public_key_output: public/signing-public.pem
-
-      - name: Sign provisional GHSA feed and verify
-        if: hashFiles('public/advisories/ghsa-without-cve.json') != ''
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY }}
-          private_key_passphrase: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY_PASSPHRASE }}
-          input_file: public/advisories/ghsa-without-cve.json
-          signature_file: public/advisories/ghsa-without-cve.json.sig
 
       - name: Generate advisory checksums manifest
         run: |
           set -euo pipefail
 
-          FILES_JSON="{}"
-          ADVISORY_ARTIFACTS=(public/advisories/*.json public/advisories/*.json.sig)
-          for file in "${ADVISORY_ARTIFACTS[@]}"; do
-            [ -e "$file" ] || continue
-            REL_PATH="${file#public/}"
-            FILE_SHA=$(sha256sum "$file" | awk '{print $1}')
-            FILE_SIZE=$(stat -c%s "$file" 2>/dev/null || stat -f%z "$file")
-            FILES_JSON=$(jq \
-              --arg path "$REL_PATH" \
-              --arg sha "$FILE_SHA" \
-              --argjson size "$FILE_SIZE" \
-              '. + {($path): {sha256: $sha, size: $size, path: $path, url: ("https://clawsec.prompt.security/" + $path)}}' \
-              <<< "$FILES_JSON")
-          done
+          FEED_FILE="public/advisories/feed.json"
+          FEED_SHA=$(sha256sum "$FEED_FILE" | awk '{print $1}')
+          FEED_SIZE=$(stat -c%s "$FEED_FILE" 2>/dev/null || stat -f%z "$FEED_FILE")
 
           # Generate checksums manifest conforming to parseChecksumsManifest expectations:
           # - schema_version: "1" (manifest format version)
@@ -307,19 +239,36 @@ jobs:
             --arg version "1.1.0" \
             --arg generated "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
             --arg repo "${{ github.repository }}" \
-            --argjson files "$FILES_JSON" \
+            --arg sha "$FEED_SHA" \
+            --argjson size "$FEED_SIZE" \
             '{
               schema_version: $schema_version,
               algorithm: $algorithm,
               version: $version,
               generated_at: $generated,
               repository: $repo,
-              files: $files
+              files: {
+                "advisories/feed.json": {
+                  sha256: $sha,
+                  size: $size,
+                  path: "advisories/feed.json",
+                  url: "https://clawsec.prompt.security/advisories/feed.json"
+                }
+              }
             }' > public/checksums.json
 
           echo "Generated public/checksums.json"
           jq . public/checksums.json
 
+      - name: Sign advisory feed and verify
+        uses: ./.github/actions/sign-and-verify
+        with:
+          private_key: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY }}
+          private_key_passphrase: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY_PASSPHRASE }}
+          input_file: public/advisories/feed.json
+          signature_file: public/advisories/feed.json.sig
+          public_key_output: public/signing-public.pem
+
       - name: Sign checksums and verify
         uses: ./.github/actions/sign-and-verify
         with:
@@ -352,11 +301,11 @@ jobs:
       - name: Show signed advisory artifacts
         run: |
           echo "Signed advisory artifacts:"
-          ls -la public/advisories/*.json*
+          ls -la public/advisories/feed.json*
           ls -la public/checksums.json public/checksums.sig public/signing-public.pem
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: '20'
           cache: 'npm'
@@ -405,16 +354,6 @@ jobs:
               cp "public/advisories/feed.json.sig" "$MIRROR_LATEST_DIR/advisories/feed.json.sig"
               cp "public/advisories/feed.json.sig" "$MIRROR_LATEST_DIR/feed.json.sig"
             fi
-            if [ -f "public/advisories/ghsa-without-cve.json" ]; then
-              mkdir -p "$MIRROR_LATEST_DIR/advisories"
-              cp "public/advisories/ghsa-without-cve.json" "$MIRROR_LATEST_DIR/advisories/ghsa-without-cve.json"
-              cp "public/advisories/ghsa-without-cve.json" "$MIRROR_LATEST_DIR/ghsa-without-cve.json"
-            fi
-            if [ -f "public/advisories/ghsa-without-cve.json.sig" ]; then
-              mkdir -p "$MIRROR_LATEST_DIR/advisories"
-              cp "public/advisories/ghsa-without-cve.json.sig" "$MIRROR_LATEST_DIR/advisories/ghsa-without-cve.json.sig"
-              cp "public/advisories/ghsa-without-cve.json.sig" "$MIRROR_LATEST_DIR/ghsa-without-cve.json.sig"
-            fi
             if [ -f "public/checksums.json" ]; then
               cp "public/checksums.json" "$MIRROR_LATEST_DIR/checksums.json"
             fi
@@ -454,27 +393,15 @@ jobs:
         run: touch dist/.nojekyll
 
       - name: Setup Pages
-        uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
 
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
+        uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
         with:
           path: ./dist
 
   deploy:
-    # Deploy after a production build succeeds.
-    if: |
-      github.event_name == 'workflow_dispatch' ||
-      (
-        github.event_name == 'push' &&
-        github.ref_name == 'main'
-      ) ||
-      (
-        github.event_name == 'workflow_run' &&
-        github.event.workflow_run.conclusion == 'success' &&
-        github.event.workflow_run.name == 'Skill Release' &&
-        github.event.workflow_run.event != 'pull_request'
-      )
+    # Deploy after build succeeds (CI or Skill Release must pass first, or manual dispatch)
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
@@ -483,4 +410,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5

.github/workflows/i18n-qa.yml

@@ -1,35 +0,0 @@
-name: i18n QA
-
-on:
-  pull_request:
-    branches: [main]
-    paths:
-      - 'README*.md'
-      - 'wiki/**/*.md'
-      - 'scripts/i18n/**'
-      - '.github/workflows/i18n-qa.yml'
-  workflow_dispatch:
-
-permissions: read-all
-
-jobs:
-  i18n-qa:
-    name: Translation Integrity Checks
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          fetch-depth: 0
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
-        with:
-          python-version: '3.12'
-      - name: Run i18n QA
-        run: python scripts/i18n/qa_check.py
-
-      - name: Check markdown links (README/wiki)
-        run: |
-          if [ "${{ github.event_name }}" = "pull_request" ]; then
-            python scripts/i18n/link_check.py --changed-only --base-ref "origin/${{ github.base_ref }}"
-          else
-            python scripts/i18n/link_check.py
-          fi

.github/workflows/pages-verify.yml

@@ -1,126 +0,0 @@
-name: Pages Verify
-
-on:
-  pull_request:
-    branches: [main]
-
-permissions:
-  contents: read
-
-concurrency:
-  group: pages-verify-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  verify-pages-build:
-    name: Verify Pages Build (No Publish)
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Verify signing key consistency (repo + docs)
-        run: ./scripts/ci/verify_signing_key_consistency.sh
-
-      - name: Prepare advisory artifacts for pre-deploy checks
-        run: |
-          set -euo pipefail
-          mkdir -p public/advisories
-          cp advisories/feed.json public/advisories/feed.json
-          if [ -f advisories/ghsa-without-cve.json ]; then
-            cp advisories/ghsa-without-cve.json public/advisories/ghsa-without-cve.json
-          fi
-
-      - name: Generate advisory checksums manifest
-        run: |
-          set -euo pipefail
-
-          FILES_JSON="{}"
-          for file in public/advisories/*.json; do
-            REL_PATH="${file#public/}"
-            FILE_SHA=$(sha256sum "$file" | awk '{print $1}')
-            FILE_SIZE=$(stat -c%s "$file" 2>/dev/null || stat -f%z "$file")
-            FILES_JSON=$(jq \
-              --arg path "$REL_PATH" \
-              --arg sha "$FILE_SHA" \
-              --argjson size "$FILE_SIZE" \
-              '. + {($path): {sha256: $sha, size: $size, path: $path, url: ("https://clawsec.prompt.security/" + $path)}}' \
-              <<< "$FILES_JSON")
-          done
-
-          jq -n \
-            --arg schema_version "1" \
-            --arg algorithm "sha256" \
-            --arg version "1.1.0" \
-            --arg generated "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
-            --arg repo "${{ github.repository }}" \
-            --argjson files "$FILES_JSON" \
-            '{
-              schema_version: $schema_version,
-              algorithm: $algorithm,
-              version: $version,
-              generated_at: $generated,
-              repository: $repo,
-              files: $files
-            }' > public/checksums.json
-
-      - name: Generate ephemeral signing key for PR verification
-        id: test_key
-        run: |
-          set -euo pipefail
-          KEY_FILE=$(mktemp)
-          openssl genpkey -algorithm Ed25519 -out "$KEY_FILE"
-          {
-            echo "private_key<<EOF"
-            cat "$KEY_FILE"
-            echo "EOF"
-          } >> "$GITHUB_OUTPUT"
-          rm -f "$KEY_FILE"
-
-      - name: Sign advisory feed and verify
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ steps.test_key.outputs.private_key }}
-          input_file: public/advisories/feed.json
-          signature_file: public/advisories/feed.json.sig
-          public_key_output: public/signing-public.pem
-
-      - name: Sign provisional GHSA feed and verify
-        if: hashFiles('public/advisories/ghsa-without-cve.json') != ''
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ steps.test_key.outputs.private_key }}
-          input_file: public/advisories/ghsa-without-cve.json
-          signature_file: public/advisories/ghsa-without-cve.json.sig
-
-      - name: Sign checksums and verify
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ steps.test_key.outputs.private_key }}
-          input_file: public/checksums.json
-          signature_file: public/checksums.sig
-
-      - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build site
-        run: npm run build
-        env:
-          NODE_ENV: production
-
-      - name: Sanity-check generated artifacts
-        run: |
-          set -euo pipefail
-          test -f dist/index.html
-          test -f public/advisories/feed.json.sig
-          if [ -f public/advisories/ghsa-without-cve.json ]; then
-            test -f public/advisories/ghsa-without-cve.json.sig
-          fi
-          test -f public/checksums.sig
-          test -f public/signing-public.pem

.github/workflows/poll-ghsa-without-cve.yml

@@ -1,158 +0,0 @@
-name: Poll GHSA Without CVE
-
-on:
-  workflow_dispatch:
-
-permissions: read-all
-
-concurrency:
-  group: poll-ghsa-without-cve
-  cancel-in-progress: false
-
-env:
-  FEED_PATH: advisories/feed.json
-  FEED_SIG_PATH: advisories/feed.json.sig
-  GHSA_FEED_PATH: advisories/ghsa-without-cve.json
-  GHSA_FEED_SIG_PATH: advisories/ghsa-without-cve.json.sig
-  SKILL_FEED_PATH: skills/clawsec-feed/advisories/feed.json
-  SKILL_FEED_SIG_PATH: skills/clawsec-feed/advisories/feed.json.sig
-
-jobs:
-  poll-and-update:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
-        with:
-          node-version: '20'
-          cache: 'npm'
-
-      - name: Run GHSA feed tests
-        run: node scripts/test-ghsa-without-cve-feed.mjs
-
-      - name: Poll GitHub Security Advisories
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-          node scripts/ghsa-without-cve-feed.mjs \
-            --output "$GHSA_FEED_PATH" \
-            --consolidated-feed "$FEED_PATH" \
-            --existing-feed "$GHSA_FEED_PATH" \
-            --nvd-feed "$FEED_PATH" \
-            --stale-after-days 60
-
-      - name: Sync consolidated feed to clawsec-feed skill
-        run: |
-          set -euo pipefail
-          mkdir -p "$(dirname "$SKILL_FEED_PATH")"
-          cp "$FEED_PATH" "$SKILL_FEED_PATH"
-
-      - name: Detect feed changes
-        id: changes
-        run: |
-          set -euo pipefail
-
-          GHSA_CHANGED=false
-          AGENT_CHANGED=false
-
-          if ! git diff --quiet -- "$GHSA_FEED_PATH" || [ ! -f "$GHSA_FEED_SIG_PATH" ]; then
-            GHSA_CHANGED=true
-          fi
-
-          if ! git diff --quiet -- "$FEED_PATH" "$SKILL_FEED_PATH" || [ ! -f "$FEED_SIG_PATH" ] || [ ! -f "$SKILL_FEED_SIG_PATH" ]; then
-            AGENT_CHANGED=true
-          fi
-
-          echo "ghsa_changed=$GHSA_CHANGED" >> "$GITHUB_OUTPUT"
-          echo "agent_changed=$AGENT_CHANGED" >> "$GITHUB_OUTPUT"
-
-          if [ "$GHSA_CHANGED" = "true" ] || [ "$AGENT_CHANGED" = "true" ]; then
-            echo "changed=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "changed=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Sign GHSA feed and verify
-        if: steps.changes.outputs.ghsa_changed == 'true'
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY }}
-          private_key_passphrase: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY_PASSPHRASE }}
-          input_file: ${{ env.GHSA_FEED_PATH }}
-          signature_file: ${{ env.GHSA_FEED_SIG_PATH }}
-
-      - name: Sign consolidated agent feed and verify
-        if: steps.changes.outputs.agent_changed == 'true'
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY }}
-          private_key_passphrase: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY_PASSPHRASE }}
-          input_file: ${{ env.FEED_PATH }}
-          signature_file: ${{ env.FEED_SIG_PATH }}
-          verify_files: |
-            ${{ env.FEED_PATH }}
-            ${{ env.SKILL_FEED_PATH }}
-
-      - name: Sync consolidated signature to clawsec-feed skill
-        if: steps.changes.outputs.agent_changed == 'true'
-        run: cp "$FEED_SIG_PATH" "$SKILL_FEED_SIG_PATH"
-
-      - name: Create Pull Request
-        if: steps.changes.outputs.changed == 'true'
-        id: create-pr
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
-        with:
-          token: ${{ github.token }}
-          branch: automated/ghsa-without-cve-feed
-          delete-branch: true
-          title: 'chore: update provisional GHSA advisory feed'
-          body: |
-            ## Summary
-            Updates the provisional GHSA advisory feed and the consolidated agent advisory feed.
-
-            - Feed: `${{ env.GHSA_FEED_PATH }}`
-            - Agent feed: `${{ env.FEED_PATH }}`
-            - Stale threshold: 60 days without a CVE
-            - Statuses: `active`, `matured`, `stale`
-
-            ---
-            *This PR was automatically generated by the GHSA-without-CVE polling workflow.*
-          commit-message: |
-            chore: update provisional GHSA advisory feed
-
-            Poll public GitHub Security Advisories without CVE identifiers.
-          add-paths: |
-            ${{ env.FEED_PATH }}
-            ${{ env.FEED_SIG_PATH }}
-            ${{ env.GHSA_FEED_PATH }}
-            ${{ env.GHSA_FEED_SIG_PATH }}
-            ${{ env.SKILL_FEED_PATH }}
-            ${{ env.SKILL_FEED_SIG_PATH }}
-
-      - name: Summary
-        run: |
-          set -euo pipefail
-          echo "## GHSA Without CVE Poll Summary" >> "$GITHUB_STEP_SUMMARY"
-          echo "" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Metric | Value |" >> "$GITHUB_STEP_SUMMARY"
-          echo "|--------|-------|" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Feed changed | ${{ steps.changes.outputs.changed }} |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Agent feed changed | ${{ steps.changes.outputs.agent_changed }} |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| GHSA source feed changed | ${{ steps.changes.outputs.ghsa_changed }} |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Feed path | $GHSA_FEED_PATH |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Agent feed path | $FEED_PATH |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Total advisories | $(jq '.advisories | length' "$GHSA_FEED_PATH") |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Active | $(jq '[.advisories[] | select(.status == "active")] | length' "$GHSA_FEED_PATH") |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Matured | $(jq '[.advisories[] | select(.status == "matured")] | length' "$GHSA_FEED_PATH") |" >> "$GITHUB_STEP_SUMMARY"
-          echo "| Stale | $(jq '[.advisories[] | select(.status == "stale")] | length' "$GHSA_FEED_PATH") |" >> "$GITHUB_STEP_SUMMARY"
-          if [ -n "${{ steps.create-pr.outputs.pull-request-url }}" ]; then
-            echo "" >> "$GITHUB_STEP_SUMMARY"
-            echo "Upserted PR: ${{ steps.create-pr.outputs.pull-request-url }}" >> "$GITHUB_STEP_SUMMARY"
-          fi

.github/workflows/poll-nvd-cves.yml

@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
     inputs:
       force_full_scan:
-        description: 'Ignore feed state and rebuild CVE advisories from full NVD history'
+        description: 'Ignore last poll date and scan all CVEs'
         required: false
         default: 'false'
         type: boolean
@@ -21,16 +21,15 @@ concurrency:
 env:
   FEED_PATH: advisories/feed.json
   FEED_SIG_PATH: advisories/feed.json.sig
-  GHSA_FEED_PATH: advisories/ghsa-without-cve.json
-  GHSA_FEED_SIG_PATH: advisories/ghsa-without-cve.json.sig
   SKILL_FEED_PATH: skills/clawsec-feed/advisories/feed.json
   SKILL_FEED_SIG_PATH: skills/clawsec-feed/advisories/feed.json.sig
+  KEYWORDS: "OpenClaw clawdbot Moltbot"
+  GITHUB_REF_PATTERN: "github.com/openclaw/openclaw"
 
 jobs:
   poll-and-update:
     runs-on: ubuntu-latest
     permissions:
-      actions: write
       contents: write
       pull-requests: write
     steps:
@@ -85,10 +84,7 @@ jobs:
         id: fetch
         run: |
           set -euo pipefail
-          source scripts/feed-utils.sh
           mkdir -p tmp
-          FORCE_FULL_SCAN="${{ inputs.force_full_scan }}"
-          NVD_QUERY_SPECS="$(nvd_query_specs)"
           
           START_DATE="${{ steps.dates.outputs.start_date }}"
           END_DATE="${{ steps.dates.outputs.end_date }}"
@@ -99,112 +95,52 @@ jobs:
           
           echo "=== Fetching CVEs from NVD ==="
 
-          FAILED_QUERIES=()
+          FAILED_KEYWORDS=()
           
-          while IFS='|' read -r QUERY_KIND QUERY_VALUE; do
-            [ -n "$QUERY_KIND" ] || continue
-
-            QUERY_SLUG="$(nvd_query_slug "$QUERY_KIND" "$QUERY_VALUE")"
-            echo "Fetching $QUERY_KIND query: $QUERY_VALUE"
-
+          # Fetch for each keyword
+          for KEYWORD in $KEYWORDS; do
+            echo "Fetching keyword: $KEYWORD"
+            
+            URL="https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=${KEYWORD}&lastModStartDate=${START_ENC}&lastModEndDate=${END_ENC}"
+            echo "URL: $URL"
+            
+            # Fetch with retry logic
             keyword_ok=false
             last_http_code=""
-
-            if [ "$FORCE_FULL_SCAN" = "true" ]; then
-              echo "Full scan mode enabled: paginating complete NVD history for '$QUERY_KIND:$QUERY_VALUE'"
-              echo '{"vulnerabilities":[]}' > "tmp/nvd_${QUERY_SLUG}.json"
-              START_INDEX=0
-              RESULTS_PER_PAGE=2000
-
-              while true; do
-                URL="$(nvd_build_url "$QUERY_KIND" "$QUERY_VALUE" "&startIndex=${START_INDEX}&resultsPerPage=${RESULTS_PER_PAGE}")"
-                PAGE_FILE="tmp/nvd_${QUERY_SLUG}_${START_INDEX}.json"
-                echo "URL: $URL"
-
-                page_ok=false
-                for i in 1 2 3; do
-                  HTTP_CODE=$(curl -sS -w "%{http_code}" -o "$PAGE_FILE" "$URL" || true)
-                  if [ -z "$HTTP_CODE" ]; then
-                    HTTP_CODE="000"
-                  fi
-                  last_http_code="$HTTP_CODE"
-                  if [ "$HTTP_CODE" = "200" ]; then
-                    if jq -e . "$PAGE_FILE" >/dev/null 2>&1; then
-                      page_ok=true
-                      break
-                    fi
-                    echo "Invalid JSON for $QUERY_KIND:$QUERY_VALUE page $START_INDEX, retry $i..."
-                    sleep 5
-                  elif [ "$HTTP_CODE" = "403" ] || [ "$HTTP_CODE" = "429" ]; then
-                    echo "Rate limited, waiting 30s before retry $i..."
-                    sleep 30
-                  else
-                    echo "HTTP $HTTP_CODE for $QUERY_KIND:$QUERY_VALUE page $START_INDEX, retry $i..."
-                    sleep 5
-                  fi
-                done
-
-                if [ "$page_ok" != "true" ]; then
-                  break
-                fi
-
-                jq -s '.[0].vulnerabilities += .[1].vulnerabilities | .[0]' \
-                  "tmp/nvd_${QUERY_SLUG}.json" "$PAGE_FILE" > "tmp/nvd_${QUERY_SLUG}_merged.json"
-                mv "tmp/nvd_${QUERY_SLUG}_merged.json" "tmp/nvd_${QUERY_SLUG}.json"
-
-                PAGE_COUNT=$(jq '.vulnerabilities | length' "$PAGE_FILE")
-                TOTAL_RESULTS=$(jq '.totalResults // 0' "$PAGE_FILE")
-                echo "Fetched $PAGE_COUNT results at startIndex=$START_INDEX (totalResults=$TOTAL_RESULTS)"
-
-                START_INDEX=$((START_INDEX + RESULTS_PER_PAGE))
-                if [ "$START_INDEX" -ge "$TOTAL_RESULTS" ] || [ "$PAGE_COUNT" -eq 0 ]; then
+            for i in 1 2 3; do
+              HTTP_CODE=$(curl -sS -w "%{http_code}" -o "tmp/nvd_${KEYWORD}.json" "$URL" || true)
+              if [ -z "$HTTP_CODE" ]; then
+                HTTP_CODE="000"
+              fi
+              last_http_code="$HTTP_CODE"
+              if [ "$HTTP_CODE" = "200" ]; then
+                if jq -e . "tmp/nvd_${KEYWORD}.json" >/dev/null 2>&1; then
+                  echo "Success for $KEYWORD"
                   keyword_ok=true
                   break
                 fi
-
-                # NVD recommends 6 second delay between requests
-                sleep 6
-              done
-            else
-              URL="$(nvd_build_url "$QUERY_KIND" "$QUERY_VALUE" "&lastModStartDate=${START_ENC}&lastModEndDate=${END_ENC}")"
-              echo "URL: $URL"
-
-              # Fetch with retry logic
-              for i in 1 2 3; do
-                HTTP_CODE=$(curl -sS -w "%{http_code}" -o "tmp/nvd_${QUERY_SLUG}.json" "$URL" || true)
-                if [ -z "$HTTP_CODE" ]; then
-                  HTTP_CODE="000"
-                fi
-                last_http_code="$HTTP_CODE"
-                if [ "$HTTP_CODE" = "200" ]; then
-                  if jq -e . "tmp/nvd_${QUERY_SLUG}.json" >/dev/null 2>&1; then
-                    echo "Success for $QUERY_KIND:$QUERY_VALUE"
-                    keyword_ok=true
-                    break
-                  fi
-                  echo "Invalid JSON for $QUERY_KIND:$QUERY_VALUE, retry $i..."
-                  sleep 5
-                elif [ "$HTTP_CODE" = "403" ] || [ "$HTTP_CODE" = "429" ]; then
-                  echo "Rate limited, waiting 30s before retry $i..."
-                  sleep 30
-                else
-                  echo "HTTP $HTTP_CODE for $QUERY_KIND:$QUERY_VALUE, retry $i..."
-                  sleep 5
-                fi
-              done
-            fi
+                echo "Invalid JSON for $KEYWORD, retry $i..."
+                sleep 5
+              elif [ "$HTTP_CODE" = "403" ] || [ "$HTTP_CODE" = "429" ]; then
+                echo "Rate limited, waiting 30s before retry $i..."
+                sleep 30
+              else
+                echo "HTTP $HTTP_CODE for $KEYWORD, retry $i..."
+                sleep 5
+              fi
+            done
 
             if [ "$keyword_ok" != "true" ]; then
-              echo "::error::Failed to fetch valid NVD response for '$QUERY_KIND:$QUERY_VALUE' (last HTTP code: ${last_http_code:-unknown})."
-              FAILED_QUERIES+=("${QUERY_KIND}:${QUERY_VALUE}")
+              echo "::error::Failed to fetch valid NVD response for keyword '$KEYWORD' (last HTTP code: ${last_http_code:-unknown})."
+              FAILED_KEYWORDS+=("$KEYWORD")
             fi
             
             # NVD recommends 6 second delay between requests
             sleep 6
-          done <<< "$NVD_QUERY_SPECS"
+          done
           
-          if [ "${#FAILED_QUERIES[@]}" -gt 0 ]; then
-            echo "::error::NVD fetch failed for query spec(s): ${FAILED_QUERIES[*]}"
+          if [ "${#FAILED_KEYWORDS[@]}" -gt 0 ]; then
+            echo "::error::NVD fetch failed for keyword(s): ${FAILED_KEYWORDS[*]}"
             exit 1
           fi
 
@@ -214,22 +150,11 @@ jobs:
       - name: Merge and filter CVEs
         id: process
         run: |
-          source scripts/feed-utils.sh
-          NVD_QUERY_SPECS="$(nvd_query_specs)"
-          KEYWORDS_PATTERN="$(nvd_keyword_pattern)"
-          GITHUB_PATTERN="$(nvd_github_ref_pattern)"
-          CPE_PATTERN="$(nvd_cpe_pattern)"
-          # Export concise project keyword groups for PR body + workflow summary steps
-          KEYWORDS="$(nvd_summary_keywords)"
-          echo "KEYWORDS=$KEYWORDS" >> "$GITHUB_ENV"
-
           # Combine all fetched CVEs
           echo '{"vulnerabilities":[]}' > tmp/combined.json
           
-          while IFS='|' read -r QUERY_KIND QUERY_VALUE; do
-            [ -n "$QUERY_KIND" ] || continue
-            QUERY_SLUG="$(nvd_query_slug "$QUERY_KIND" "$QUERY_VALUE")"
-            FILE="tmp/nvd_${QUERY_SLUG}.json"
+          for KEYWORD in $KEYWORDS; do
+            FILE="tmp/nvd_${KEYWORD}.json"
             if [ -f "$FILE" ] && [ -s "$FILE" ]; then
               # Check if file has vulnerabilities array
               if jq -e '.vulnerabilities' "$FILE" > /dev/null 2>&1; then
@@ -242,7 +167,7 @@ jobs:
                 mv tmp/combined_new.json tmp/combined.json
               fi
             fi
-          done <<< "$NVD_QUERY_SPECS"
+          done
           
           # Deduplicate by CVE ID
           jq '.vulnerabilities | unique_by(.cve.id)' tmp/combined.json > tmp/unique_cves.json
@@ -250,16 +175,16 @@ jobs:
           echo "Total unique CVEs from NVD: $TOTAL"
           
           # Post-filter: keep only CVEs where description contains keywords OR references contain github pattern
-          jq --arg kw "$KEYWORDS_PATTERN" --arg gh "$GITHUB_PATTERN" --arg cpe "$CPE_PATTERN" '
+          KEYWORDS_PATTERN="OpenClaw|clawdbot|Moltbot|openclaw"
+          GITHUB_PATTERN="${GITHUB_REF_PATTERN}"
+          
+          jq --arg kw "$KEYWORDS_PATTERN" --arg gh "$GITHUB_PATTERN" '
             [.[] | select(
               # Check if any description contains keywords (case insensitive)
               (.cve.descriptions[]? | select(.lang == "en") | .value | test($kw; "i"))
               or
               # Check if any reference URL contains the github pattern
               (.cve.references[]? | .url | test($gh; "i"))
-              or
-              # Check if any CPE criteria contain the Hermes product identifier
-              ([.cve.configurations[]? | .. | objects | .criteria? | strings | test($cpe; "i")] | any)
             )]
           ' tmp/unique_cves.json > tmp/filtered_cves.json
           
@@ -286,14 +211,6 @@ jobs:
       - name: Check for updates to existing advisories
         id: updates
         run: |
-          if [ "${{ inputs.force_full_scan }}" = "true" ]; then
-            echo "Full scan mode enabled: skipping delta update detection."
-            echo '[]' > tmp/updated_advisories.json
-            echo "Advisories to update: 0"
-            echo "update_count=0" >> $GITHUB_OUTPUT
-            exit 0
-          fi
-
           # Compare existing CVE advisories against NVD data for changes
           # Only check advisories that start with "CVE-" (NVD-sourced)
 
@@ -380,89 +297,15 @@ jobs:
                   end
               );
 
-            def cpe_criteria:
-              (
-                [.cve.configurations[]? | .. | objects | .criteria? | strings | select(startswith("cpe:2.3:"))]
-                | unique
-              );
-
-            def detection_blob:
-              (
-                [
-                  (.cve.descriptions[]? | select(.lang == "en") | .value),
-                  (.cve.references[]?.url // empty),
-                  (.cve.configurations[]? | .. | objects | .criteria? // empty)
-                ]
-                | map(strings | ascii_downcase)
-                | join(" ")
-              );
-
-            def inferred_targets:
-              (
-                detection_blob as $blob
-                | (
-                    (if ($blob | test("github\\.com/openclaw/openclaw|\\bopenclaw\\b|\\bclawdbot\\b|\\bmoltbot\\b")) then ["openclaw@*"] else [] end)
-                    + (if ($blob | test("github\\.com/qwibitai/nanoclaw|\\bnanoclaw\\b|whatsapp-bot|\\bbaileys\\b")) then ["nanoclaw@*"] else [] end)
-                    + (if ($blob | test("github\\.com/softwarepub/hermes|github\\.com/nousresearch/hermes-agent|cpe:2\\.3:a:software-metadata\\.pub:hermes|\\bhermes workflow\\b|\\bhermes-agent\\b|software publication with rich metadata")) then ["hermes@*"] else [] end)
-                    + (if ($blob | test("github\\.com/[^/]+/picoclaw|\\bpicoclaw\\b|cpe:2\\.3:[aho]:[^:]*:picoclaw(?::|$)")) then ["picoclaw@*"] else [] end)
-                  )
-              );
-
-            def matched_targets:
-              (
-                (cpe_criteria + inferred_targets)
-                | unique
-                | .[0:5]
-              );
-
-            def platforms_from_targets($targets):
-              (
-                [
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("openclaw@") or test("^cpe:2\\.3:[aho]:openclaw:openclaw(?::|$)"))) | length > 0) then "openclaw" else empty end),
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("nanoclaw@") or test("^cpe:2\\.3:[aho]:[^:]*:nanoclaw(?::|$)"))) | length > 0) then "nanoclaw" else empty end),
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("hermes@") or test("^cpe:2\\.3:[aho]:software-metadata\\.pub:hermes(?::|$)"))) | length > 0) then "hermes" else empty end),
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("picoclaw@") or test("^cpe:2\\.3:[aho]:[^:]*:picoclaw(?::|$)"))) | length > 0) then "picoclaw" else empty end)
-                ]
-              );
-
-            def normalized_affected:
-              (
-                matched_targets
-                | if length == 0 then ["openclaw@*", "nanoclaw@*", "hermes@*", "picoclaw@*"] else . end
-              );
-
-            def normalized_platforms:
-              (
-                inferred_targets as $inferred
-                | platforms_from_targets($inferred) as $from_inferred
-                | if ($from_inferred | length) > 0 then $from_inferred
-                  else
-                    matched_targets as $targets
-                    | platforms_from_targets($targets) as $from_targets
-                    | if ($from_targets | length) > 0 then $from_targets else ["openclaw", "nanoclaw", "hermes", "picoclaw"] end
-                  end
-              );
-
-            def preferred_description:
-              (
-                (.cve.descriptions[]? | select(.lang == "en") | .value)
-                // .cve.descriptions[0]?.value
-                // "No description provided by NVD."
-              );
-
             [.[] | {
               id: .cve.id,
               severity: (get_cvss_score | map_severity),
               type: nvd_category_name,
               nvd_category_id: nvd_category_raw,
               cvss_score: get_cvss_score,
-              description: preferred_description,
-              title: (preferred_description | .[0:100] + (if length > 100 then "..." else "" end)),
-              affected: normalized_affected,
-              platforms: normalized_platforms,
-              references: [.cve.references[]?.url // empty] | unique | .[0:3],
-              exploitability_score: null,
-              exploitability_rationale: null
+              description: (.cve.descriptions[] | select(.lang == "en") | .value),
+              title: (.cve.descriptions[] | select(.lang == "en") | .value | .[0:100] + (if length > 100 then "..." else "" end)),
+              references: [.cve.references[]?.url // empty] | unique | .[0:3]
             }]
           ' tmp/filtered_cves.json > tmp/nvd_current_state.json
 
@@ -482,8 +325,6 @@ jobs:
                    ($existing_entry.type != $nvd_entry.type) or
                    ($existing_entry.nvd_category_id != $nvd_entry.nvd_category_id) or
                    ($existing_entry.cvss_score != $nvd_entry.cvss_score) or
-                   ($existing_entry.affected != $nvd_entry.affected) or
-                   ($existing_entry.platforms != $nvd_entry.platforms) or
                    ($existing_entry.description != $nvd_entry.description) then
                   {
                     id: $nvd_entry.id,
@@ -493,8 +334,6 @@ jobs:
                       + (if $existing_entry.type != $nvd_entry.type then ["type: \($existing_entry.type // "null") → \($nvd_entry.type // "null")"] else [] end)
                       + (if $existing_entry.nvd_category_id != $nvd_entry.nvd_category_id then ["nvd_category_id: \($existing_entry.nvd_category_id // "null") → \($nvd_entry.nvd_category_id // "null")"] else [] end)
                       + (if $existing_entry.cvss_score != $nvd_entry.cvss_score then ["cvss_score: \($existing_entry.cvss_score // "null") → \($nvd_entry.cvss_score // "null")"] else [] end)
-                      + (if $existing_entry.affected != $nvd_entry.affected then ["affected targets updated"] else [] end)
-                      + (if $existing_entry.platforms != $nvd_entry.platforms then ["platforms updated"] else [] end)
                       + (if $existing_entry.description != $nvd_entry.description then ["description updated"] else [] end)
                     ),
                     updated_fields: {
@@ -502,8 +341,6 @@ jobs:
                       type: $nvd_entry.type,
                       nvd_category_id: $nvd_entry.nvd_category_id,
                       cvss_score: $nvd_entry.cvss_score,
-                      affected: $nvd_entry.affected,
-                      platforms: $nvd_entry.platforms,
                       description: $nvd_entry.description,
                       title: $nvd_entry.title,
                       references: $nvd_entry.references
@@ -530,16 +367,11 @@ jobs:
       - name: Transform CVEs to advisories
         id: transform
         run: |
-          # Read existing IDs into a jq-friendly file for jq (avoids huge CLI args on full scans).
-          if [ "${{ inputs.force_full_scan }}" = "true" ]; then
-            echo "Full scan mode enabled: rebuilding CVE advisories from scratch."
-            echo '[]' > tmp/existing_ids.json
-          else
-            jq -R -s 'split("\n") | map(select(length > 0))' < tmp/existing_ids.txt > tmp/existing_ids.json
-          fi
+          # Read existing IDs into a jq-friendly format
+          EXISTING_IDS=$(cat tmp/existing_ids.txt | jq -R -s 'split("\n") | map(select(length > 0))')
           
           # Transform NVD CVEs to our advisory format
-          jq --slurpfile existing tmp/existing_ids.json '
+          jq --argjson existing "$EXISTING_IDS" '
             def map_severity:
               if . == null then "medium"
               elif . >= 9.0 then "critical"
@@ -621,95 +453,22 @@ jobs:
                   else (cwe_name_map($id) // ("unknown_cwe_" + $id))
                   end
               );
-
-            def cpe_criteria:
-              (
-                [.cve.configurations[]? | .. | objects | .criteria? | strings | select(startswith("cpe:2.3:"))]
-                | unique
-              );
-
-            def detection_blob:
-              (
-                [
-                  (.cve.descriptions[]? | select(.lang == "en") | .value),
-                  (.cve.references[]?.url // empty),
-                  (.cve.configurations[]? | .. | objects | .criteria? // empty)
-                ]
-                | map(strings | ascii_downcase)
-                | join(" ")
-              );
-
-            def inferred_targets:
-              (
-                detection_blob as $blob
-                | (
-                    (if ($blob | test("github\\.com/openclaw/openclaw|\\bopenclaw\\b|\\bclawdbot\\b|\\bmoltbot\\b")) then ["openclaw@*"] else [] end)
-                    + (if ($blob | test("github\\.com/qwibitai/nanoclaw|\\bnanoclaw\\b|whatsapp-bot|\\bbaileys\\b")) then ["nanoclaw@*"] else [] end)
-                    + (if ($blob | test("github\\.com/softwarepub/hermes|github\\.com/nousresearch/hermes-agent|cpe:2\\.3:a:software-metadata\\.pub:hermes|\\bhermes workflow\\b|\\bhermes-agent\\b|software publication with rich metadata")) then ["hermes@*"] else [] end)
-                    + (if ($blob | test("github\\.com/[^/]+/picoclaw|\\bpicoclaw\\b|cpe:2\\.3:[aho]:[^:]*:picoclaw(?::|$)")) then ["picoclaw@*"] else [] end)
-                  )
-              );
-
-            def matched_targets:
-              (
-                (cpe_criteria + inferred_targets)
-                | unique
-                | .[0:5]
-              );
-
-            def platforms_from_targets($targets):
-              (
-                [
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("openclaw@") or test("^cpe:2\\.3:[aho]:openclaw:openclaw(?::|$)"))) | length > 0) then "openclaw" else empty end),
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("nanoclaw@") or test("^cpe:2\\.3:[aho]:[^:]*:nanoclaw(?::|$)"))) | length > 0) then "nanoclaw" else empty end),
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("hermes@") or test("^cpe:2\\.3:[aho]:software-metadata\\.pub:hermes(?::|$)"))) | length > 0) then "hermes" else empty end),
-                  (if ($targets | map(strings | ascii_downcase | select(startswith("picoclaw@") or test("^cpe:2\\.3:[aho]:[^:]*:picoclaw(?::|$)"))) | length > 0) then "picoclaw" else empty end)
-                ]
-              );
-
-            def normalized_affected:
-              (
-                matched_targets
-                | if length == 0 then ["openclaw@*", "nanoclaw@*", "hermes@*", "picoclaw@*"] else . end
-              );
-
-            def normalized_platforms:
-              (
-                inferred_targets as $inferred
-                | platforms_from_targets($inferred) as $from_inferred
-                | if ($from_inferred | length) > 0 then $from_inferred
-                  else
-                    matched_targets as $targets
-                    | platforms_from_targets($targets) as $from_targets
-                    | if ($from_targets | length) > 0 then $from_targets else ["openclaw", "nanoclaw", "hermes", "picoclaw"] end
-                  end
-              );
-
-            def preferred_description:
-              (
-                (.cve.descriptions[]? | select(.lang == "en") | .value)
-                // .cve.descriptions[0]?.value
-                // "No description provided by NVD."
-              );
             
-            [.[] |
-              select(.cve.id as $id | (($existing[0] // []) | index($id) | not)) |
+            [.[] | 
+              select(.cve.id as $id | $existing | index($id) | not) |
               {
                 id: .cve.id,
                 severity: (get_cvss_score | map_severity),
                 type: nvd_category_name,
                 nvd_category_id: nvd_category_raw,
-                title: (preferred_description | .[0:100] + (if length > 100 then "..." else "" end)),
-                description: preferred_description,
-                affected: normalized_affected,
-                platforms: normalized_platforms,
+                title: (.cve.descriptions[] | select(.lang == "en") | .value | .[0:100] + (if length > 100 then "..." else "" end)),
+                description: (.cve.descriptions[] | select(.lang == "en") | .value),
+                affected: [.cve.configurations[]?.nodes[]?.cpeMatch[]?.criteria // empty] | unique | .[0:5],
                 action: "Review and update affected components. See NVD for remediation details.",
                 published: .cve.published,
                 references: [.cve.references[]?.url // empty] | unique | .[0:3],
                 cvss_score: get_cvss_score,
-                nvd_url: ("https://nvd.nist.gov/vuln/detail/" + .cve.id),
-                exploitability_score: null,
-                exploitability_rationale: null
+                nvd_url: ("https://nvd.nist.gov/vuln/detail/" + .cve.id)
               }
             ]
           ' tmp/filtered_cves.json > tmp/new_advisories.json
@@ -717,77 +476,18 @@ jobs:
           NEW_COUNT=$(jq 'length' tmp/new_advisories.json)
           echo "New advisories to add: $NEW_COUNT"
           echo "new_count=$NEW_COUNT" >> $GITHUB_OUTPUT
-
-          if [ "${{ inputs.force_full_scan }}" = "true" ]; then
-            FILTERED_COUNT="${{ steps.process.outputs.filtered_count }}"
-            if [ "$NEW_COUNT" -ne "$FILTERED_COUNT" ]; then
-              echo "::error::Full scan transform mismatch: filtered CVEs=$FILTERED_COUNT transformed advisories=$NEW_COUNT"
-              exit 1
-            fi
-          fi
           
           if [ "$NEW_COUNT" -gt 0 ]; then
             echo "=== New advisories ==="
             jq '.[].id' tmp/new_advisories.json
           fi
 
-      - name: Set up Python for exploitability analysis
-        if: steps.transform.outputs.new_count != '0'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
-        with:
-          python-version: '3.10'
-
-      - name: Analyze exploitability for new advisories
-        if: steps.transform.outputs.new_count != '0'
-        run: |
-          set -euo pipefail
-
-          echo "=== Analyzing exploitability for new advisories ==="
-
-          # Extract CVSS vectors from filtered CVEs to merge with advisories
-          jq '
-            [.[] | {
-              id: .cve.id,
-              cvss_vector: (
-                .cve.metrics.cvssMetricV31[0]?.cvssData.vectorString //
-                .cve.metrics.cvssMetricV30[0]?.cvssData.vectorString //
-                .cve.metrics.cvssMetricV2[0]?.vectorString //
-                ""
-              )
-            }] | map({(.id): .cvss_vector}) | add
-          ' tmp/filtered_cves.json > tmp/cvss_vectors.json
-
-          scripts/ci/enrich_exploitability.sh \
-            --mode batch \
-            --input tmp/new_advisories.json \
-            --output tmp/new_advisories.json \
-            --cvss-vectors tmp/cvss_vectors.json
-
-          echo "=== Exploitability analysis complete ==="
-
-          # Show summary of exploitability scores
-          echo "Exploitability score distribution:"
-          jq -r '.[] | "\(.id): \(.exploitability_score // "unknown")"' tmp/new_advisories.json | \
-            awk -F': ' '{scores[$2]++} END {for (s in scores) print "  " s ": " scores[s]}'
-
       - name: Update feed.json
         if: steps.transform.outputs.new_count != '0' || steps.updates.outputs.update_count != '0'
         run: |
           NOW=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-          FORCE_FULL_SCAN="${{ inputs.force_full_scan }}"
 
-          if [ -f "$FEED_PATH" ] && [ "$FORCE_FULL_SCAN" = "true" ]; then
-            # Full scan mode: replace all CVE advisories with rebuilt set and keep non-CVE entries.
-            jq --slurpfile rebuilt tmp/new_advisories.json --arg now "$NOW" '
-              .updated = $now |
-              .advisories = (
-                ((.advisories // []) | map(select((.id // "") | startswith("CVE-") | not)))
-                + ($rebuilt[0] // [])
-                | sort_by(.published)
-                | reverse
-              )
-            ' "$FEED_PATH" > tmp/updated_feed.json
-          elif [ -f "$FEED_PATH" ]; then
+          if [ -f "$FEED_PATH" ]; then
             # Step 1: Apply updates to existing advisories
             jq --slurpfile updates tmp/updated_advisories.json '
               .advisories = [
@@ -804,16 +504,16 @@ jobs:
             ' "$FEED_PATH" > tmp/feed_with_updates.json
 
             # Step 2: Add new advisories
-            jq --slurpfile new tmp/new_advisories.json --arg now "$NOW" '
+            jq --argjson new "$(cat tmp/new_advisories.json)" --arg now "$NOW" '
               .updated = $now |
-              .advisories = (.advisories + ($new[0] // []) | sort_by(.published) | reverse)
+              .advisories = (.advisories + $new | sort_by(.published) | reverse)
             ' tmp/feed_with_updates.json > tmp/updated_feed.json
           else
-            jq -n --slurpfile advisories tmp/new_advisories.json --arg now "$NOW" '{
+            jq -n --argjson advisories "$(cat tmp/new_advisories.json)" --arg now "$NOW" '{
               version: "1.0.0",
               updated: $now,
               description: "Community-driven security advisory feed for ClawSec",
-              advisories: (($advisories[0] // []) | sort_by(.published) | reverse)
+              advisories: ($advisories | sort_by(.published) | reverse)
             }' > tmp/updated_feed.json
           fi
 
@@ -835,81 +535,8 @@ jobs:
             exit 1
           fi
 
-      - name: Poll GHSA without CVE and consolidate feed
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-          node scripts/ghsa-without-cve-feed.mjs \
-            --output "$GHSA_FEED_PATH" \
-            --consolidated-feed "$FEED_PATH" \
-            --existing-feed "$GHSA_FEED_PATH" \
-            --nvd-feed "$FEED_PATH" \
-            --stale-after-days 60
-
-          mkdir -p "$(dirname "$SKILL_FEED_PATH")"
-          cp "$FEED_PATH" "$SKILL_FEED_PATH"
-
-      - name: Detect advisory feed changes
-        id: feed_changes
-        run: |
-          set -euo pipefail
-
-          NVD_CHANGED=false
-          GHSA_CHANGED=false
-          AGENT_CHANGED=false
-
-          if [ "${{ steps.transform.outputs.new_count }}" != "0" ] || [ "${{ steps.updates.outputs.update_count }}" != "0" ]; then
-            NVD_CHANGED=true
-          fi
-
-          if ! git diff --quiet -- "$GHSA_FEED_PATH" || [ ! -f "$GHSA_FEED_SIG_PATH" ]; then
-            GHSA_CHANGED=true
-          fi
-
-          if ! git diff --quiet -- "$FEED_PATH" "$SKILL_FEED_PATH" || [ ! -f "$FEED_SIG_PATH" ] || [ ! -f "$SKILL_FEED_SIG_PATH" ]; then
-            AGENT_CHANGED=true
-          fi
-
-          echo "nvd_changed=$NVD_CHANGED" >> "$GITHUB_OUTPUT"
-          echo "ghsa_changed=$GHSA_CHANGED" >> "$GITHUB_OUTPUT"
-          echo "agent_changed=$AGENT_CHANGED" >> "$GITHUB_OUTPUT"
-
-          if [ "$GHSA_CHANGED" = "true" ] || [ "$AGENT_CHANGED" = "true" ]; then
-            echo "changed=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "changed=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Guard dependency manifests from NVD updates
-        if: steps.feed_changes.outputs.changed == 'true'
-        run: |
-          set -euo pipefail
-
-          BLOCKED_FILES=()
-          for file in package.json package-lock.json npm-shrinkwrap.json; do
-            if ! git diff --quiet -- "$file"; then
-              BLOCKED_FILES+=("$file")
-            fi
-          done
-
-          if [ "${#BLOCKED_FILES[@]}" -gt 0 ]; then
-            echo "::error::NVD workflow must not modify dependency manifests: ${BLOCKED_FILES[*]}"
-            git --no-pager diff -- "${BLOCKED_FILES[@]}" || true
-            exit 1
-          fi
-
-      - name: Sign GHSA feed and verify
-        if: steps.feed_changes.outputs.ghsa_changed == 'true'
-        uses: ./.github/actions/sign-and-verify
-        with:
-          private_key: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY }}
-          private_key_passphrase: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY_PASSPHRASE }}
-          input_file: ${{ env.GHSA_FEED_PATH }}
-          signature_file: ${{ env.GHSA_FEED_SIG_PATH }}
-
       - name: Sign advisory feed and verify
-        if: steps.feed_changes.outputs.agent_changed == 'true'
+        if: steps.transform.outputs.new_count != '0' || steps.updates.outputs.update_count != '0'
         uses: ./.github/actions/sign-and-verify
         with:
           private_key: ${{ secrets.CLAWSEC_SIGNING_PRIVATE_KEY }}
@@ -921,200 +548,59 @@ jobs:
             ${{ env.SKILL_FEED_PATH }}
 
       - name: Sync advisory signature to skill feed
-        if: steps.feed_changes.outputs.agent_changed == 'true'
+        if: steps.transform.outputs.new_count != '0' || steps.updates.outputs.update_count != '0'
         run: cp "$FEED_SIG_PATH" "$SKILL_FEED_SIG_PATH"
 
       - name: Clean workspace for PR
-        if: steps.feed_changes.outputs.changed == 'true'
+        if: steps.transform.outputs.new_count != '0' || steps.updates.outputs.update_count != '0'
         run: |
           # Reset any unintended changes, keep only feed files
           git checkout -- .github/ 2>/dev/null || true
           git clean -fd .github/ 2>/dev/null || true
 
-      - name: Upsert NVD advisory PR
-        if: steps.feed_changes.outputs.changed == 'true'
-        id: upsert-pr
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
+      - name: Create Pull Request
+        if: steps.transform.outputs.new_count != '0' || steps.updates.outputs.update_count != '0'
+        id: create-pr
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          branch: automated/nvd-cve-update-${{ github.run_id }}
+          delete-branch: true
+          title: "chore: CVE advisories - ${{ steps.transform.outputs.new_count }} new, ${{ steps.updates.outputs.update_count }} updated"
+          body: |
+            ## Summary
+            Automated update from NVD CVE feed.
 
-          BRANCH_PREFIX="automated/nvd-cve-update"
-          PR_COMMENT="Superseded by newer automated NVD advisory update."
-          TITLE="chore: update NVD/GHSA advisories - ${{ steps.transform.outputs.new_count }} NVD new, ${{ steps.updates.outputs.update_count }} NVD updated"
-          COMMIT_SUBJECT="$TITLE"
-          COMMIT_BODY=$'Automated update from NVD CVE and GHSA advisory feeds.\nKeywords: ${{ env.KEYWORDS }}\nPoll window: ${{ steps.dates.outputs.start_date }} to ${{ steps.dates.outputs.end_date }}'
+            - **New advisories:** ${{ steps.transform.outputs.new_count }}
+            - **Updated advisories:** ${{ steps.updates.outputs.update_count }}
+            - **Poll window:** ${{ steps.dates.outputs.start_date }} → ${{ steps.dates.outputs.end_date }}
+            - **Keywords:** ${{ env.KEYWORDS }}
 
-          GHSA_TOTAL="$(jq '.advisories | length' "$GHSA_FEED_PATH")"
-          GHSA_ACTIVE="$(jq '[.advisories[] | select(.status == "active")] | length' "$GHSA_FEED_PATH")"
-          GHSA_MATURED="$(jq '[.advisories[] | select(.status == "matured")] | length' "$GHSA_FEED_PATH")"
-          GHSA_STALE="$(jq '[.advisories[] | select(.status == "stale")] | length' "$GHSA_FEED_PATH")"
+            ---
+            *This PR was automatically generated by the NVD CVE polling workflow.*
+          commit-message: |
+            chore: CVE advisories - ${{ steps.transform.outputs.new_count }} new, ${{ steps.updates.outputs.update_count }} updated
 
-          if [ "${{ inputs.force_full_scan }}" = "true" ]; then
-            MODE="full-rebuild (ignore feed state)"
-          else
-            MODE="delta (incremental)"
-          fi
-
-          BODY_FILE="$(mktemp)"
-          cat > "$BODY_FILE" <<EOF
-          ## Summary
-          Automated update from NVD CVE and GHSA advisory feeds.
-
-          - **Mode:** ${MODE}
-          - **New NVD advisories:** ${{ steps.transform.outputs.new_count }}
-          - **Updated NVD advisories:** ${{ steps.updates.outputs.update_count }}
-          - **GHSA source feed changed:** ${{ steps.feed_changes.outputs.ghsa_changed }}
-          - **Consolidated agent feed changed:** ${{ steps.feed_changes.outputs.agent_changed }}
-          - **GHSA provisional advisories:** ${GHSA_TOTAL} total (${GHSA_ACTIVE} active, ${GHSA_MATURED} matured, ${GHSA_STALE} stale)
-          - **Poll window:** ${{ steps.dates.outputs.start_date }} → ${{ steps.dates.outputs.end_date }}
-          - **Keywords:** ${{ env.KEYWORDS }}
-
-          ---
-          *This PR was automatically generated by the NVD CVE polling workflow with GHSA consolidation.*
-          EOF
-
-          PR_LIST_JSON="$(
-            gh api --paginate "repos/${{ github.repository }}/pulls?state=open&base=main&per_page=100" \
-              --jq '.[] | {number, headRefName: .head.ref, url: .html_url, updatedAt: .updated_at}' \
-            | jq -s '.'
-          )"
-
-          mapfile -t MATCHING_OPEN_PRS < <(
-            echo "$PR_LIST_JSON" | jq -r --arg prefix "$BRANCH_PREFIX" '
-              map(select(.headRefName | startswith($prefix)))
-              | sort_by(.updatedAt)
-              | reverse
-              | .[]
-              | @base64
-            '
-          )
-
-          TARGET_BRANCH="$BRANCH_PREFIX"
-          TARGET_PR_NUMBER=""
-          TARGET_PR_URL=""
-
-          if [ "${#MATCHING_OPEN_PRS[@]}" -gt 0 ]; then
-            PRIMARY_JSON="$(echo "${MATCHING_OPEN_PRS[0]}" | base64 --decode)"
-            TARGET_BRANCH="$(echo "$PRIMARY_JSON" | jq -r '.headRefName')"
-            TARGET_PR_NUMBER="$(echo "$PRIMARY_JSON" | jq -r '.number')"
-            TARGET_PR_URL="$(echo "$PRIMARY_JSON" | jq -r '.url')"
-
-            if [ "${#MATCHING_OPEN_PRS[@]}" -gt 1 ]; then
-              echo "Found multiple open NVD advisory PRs. Closing duplicates."
-              for encoded_pr in "${MATCHING_OPEN_PRS[@]:1}"; do
-                pr_json="$(echo "$encoded_pr" | base64 --decode)"
-                pr_number="$(echo "$pr_json" | jq -r '.number')"
-                gh pr close "$pr_number" --delete-branch --comment "$PR_COMMENT"
-              done
-            fi
-          fi
-
-          echo "Using target branch: $TARGET_BRANCH"
-
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-
-          git fetch origin main
-          git checkout -B "$TARGET_BRANCH" origin/main
-
-          git add "$FEED_PATH" "$FEED_SIG_PATH" "$GHSA_FEED_PATH" "$GHSA_FEED_SIG_PATH" "$SKILL_FEED_PATH" "$SKILL_FEED_SIG_PATH"
-          if git diff --cached --quiet; then
-            echo "::error::Expected advisory feed changes but none were staged."
-            exit 1
-          fi
-
-          git commit -m "$COMMIT_SUBJECT" -m "$COMMIT_BODY"
-          git push --force origin "$TARGET_BRANCH"
-
-          if [ -n "$TARGET_PR_NUMBER" ]; then
-            gh pr edit "$TARGET_PR_NUMBER" --title "$TITLE" --body-file "$BODY_FILE"
-          else
-            TARGET_PR_URL="$(gh pr create --base main --head "$TARGET_BRANCH" --title "$TITLE" --body-file "$BODY_FILE")"
-            TARGET_PR_NUMBER="$(basename "$TARGET_PR_URL")"
-          fi
-
-          if [ -z "$TARGET_PR_URL" ]; then
-            TARGET_PR_URL="$(gh pr view "$TARGET_PR_NUMBER" --json url --jq '.url')"
-          fi
-
-          echo "pull-request-number=$TARGET_PR_NUMBER" >> "$GITHUB_OUTPUT"
-          echo "pull-request-url=$TARGET_PR_URL" >> "$GITHUB_OUTPUT"
-          echo "pull-request-branch=$TARGET_BRANCH" >> "$GITHUB_OUTPUT"
-
-      - name: Run CodeQL on generated PR branch
-        if: steps.upsert-pr.outputs.pull-request-number != ''
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-
-          BRANCH="${{ steps.upsert-pr.outputs.pull-request-branch }}"
-          if [ -z "$BRANCH" ]; then
-            echo "::error::Missing pull-request-branch output from upsert-pr step"
-            exit 1
-          fi
-
-          EXPECTED_HEAD_SHA="$(git rev-parse HEAD)"
-          DISPATCHED_AT="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-
-          echo "Dispatching CodeQL for branch: $BRANCH (head: $EXPECTED_HEAD_SHA, dispatched_at: $DISPATCHED_AT)"
-          gh workflow run codeql.yml --ref "$BRANCH"
-
-          RUN_ID=""
-          for _ in $(seq 1 30); do
-            RUN_ID=$(gh run list \
-              --workflow "CodeQL" \
-              --branch "$BRANCH" \
-              --event workflow_dispatch \
-              --limit 50 \
-              --json databaseId,createdAt,headSha \
-              --jq --arg since "$DISPATCHED_AT" --arg sha "$EXPECTED_HEAD_SHA" '
-                map(select(.createdAt >= $since and .headSha == $sha))
-                | sort_by(.createdAt)
-                | last
-                | .databaseId // empty')
-            if [ -n "$RUN_ID" ]; then
-              break
-            fi
-            sleep 5
-          done
-
-          if [ -z "$RUN_ID" ]; then
-            echo "::error::Unable to locate dispatched CodeQL run for branch $BRANCH after $DISPATCHED_AT (head: $EXPECTED_HEAD_SHA)"
-            gh run list \
-              --workflow "CodeQL" \
-              --branch "$BRANCH" \
-              --event workflow_dispatch \
-              --limit 5 \
-              --json databaseId,createdAt,headSha,status,conclusion || true
-            exit 1
-          fi
-
-          echo "Waiting for CodeQL run id: $RUN_ID"
-          gh run watch "$RUN_ID" --exit-status
+            Automated update from NVD CVE feed.
+            Keywords: ${{ env.KEYWORDS }}
+            Poll window: ${{ steps.dates.outputs.start_date }} to ${{ steps.dates.outputs.end_date }}
+          add-paths: |
+            ${{ env.FEED_PATH }}
+            ${{ env.FEED_SIG_PATH }}
+            ${{ env.SKILL_FEED_PATH }}
+            ${{ env.SKILL_FEED_SIG_PATH }}
 
       - name: Summary
         run: |
-          if [ "${{ inputs.force_full_scan }}" = "true" ]; then
-            MODE="full-rebuild (ignore feed state)"
-          else
-            MODE="delta (incremental)"
-          fi
-
           echo "## NVD CVE Poll Summary" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
           echo "| Metric | Value |" >> $GITHUB_STEP_SUMMARY
           echo "|--------|-------|" >> $GITHUB_STEP_SUMMARY
-          echo "| Mode | $MODE |" >> $GITHUB_STEP_SUMMARY
           echo "| Poll Window | ${{ steps.dates.outputs.start_date }} → ${{ steps.dates.outputs.end_date }} |" >> $GITHUB_STEP_SUMMARY
           echo "| Keywords | $KEYWORDS |" >> $GITHUB_STEP_SUMMARY
           echo "| CVEs Found (filtered) | ${{ steps.process.outputs.filtered_count }} |" >> $GITHUB_STEP_SUMMARY
           echo "| New Advisories | ${{ steps.transform.outputs.new_count }} |" >> $GITHUB_STEP_SUMMARY
           echo "| Updated Advisories | ${{ steps.updates.outputs.update_count }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| GHSA source feed changed | ${{ steps.feed_changes.outputs.ghsa_changed }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| Consolidated agent feed changed | ${{ steps.feed_changes.outputs.agent_changed }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| GHSA provisional advisories | $(jq '.advisories | length' "$GHSA_FEED_PATH") |" >> $GITHUB_STEP_SUMMARY
 
           if [ "${{ steps.transform.outputs.new_count }}" != "0" ]; then
             echo "" >> $GITHUB_STEP_SUMMARY
@@ -1132,7 +618,7 @@ jobs:
 
           if [ "${{ steps.transform.outputs.new_count }}" != "0" ] || [ "${{ steps.updates.outputs.update_count }}" != "0" ]; then
             echo "" >> $GITHUB_STEP_SUMMARY
-            echo "🔀 Upserted PR: ${{ steps.upsert-pr.outputs.pull-request-url }}" >> $GITHUB_STEP_SUMMARY
+            echo "🔀 Created PR: ${{ steps.create-pr.outputs.pull-request-url }}" >> $GITHUB_STEP_SUMMARY
           else
             echo "" >> $GITHUB_STEP_SUMMARY
             echo "✅ No new or updated CVEs found." >> $GITHUB_STEP_SUMMARY

.github/workflows/scorecard.yml

@@ -7,23 +7,12 @@ on:
   # For Branch-Protection check. Only the default branch is supported. See
   # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
   branch_protection_rule:
-  # Run immediately after dependency changes on main so vulnerability alerts close quickly.
-  push:
-    branches: [main]
-    paths:
-      - package.json
-      - package-lock.json
-      - npm-shrinkwrap.json
-      - requirements*.txt
-      - .github/requirements*.txt
-      - .github/requirements-lint-python.txt
-      - .github/workflows/scorecard.yml
   # To guarantee Maintained check is occasionally updated. See
   # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
   schedule:
     - cron: '19 23 * * 0'
-  # Allow maintainers to rescan main on demand after hotfixes.
-  workflow_dispatch:
+  push:
+    branches: [ "main" ]
 
 # Declare default permissions as read only.
 permissions: read-all
@@ -75,7 +64,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: SARIF file
           path: results.sarif
@@ -84,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+        uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
         with:
           sarif_file: results.sarif

.github/workflows/skill-release.yml

@@ -6,7 +6,8 @@ on:
       - '*-v[0-9]*.[0-9]*.[0-9]*'
   pull_request:
     paths:
-      - 'skills/**'
+      - 'skills/*/skill.json'
+      - 'skills/*/SKILL.md'
   workflow_dispatch:
     inputs:
       tag:
@@ -16,9 +17,6 @@ on:
 
 permissions: read-all
 
-env:
-  CLAWHUB_CLI_VERSION: 0.7.0
-
 concurrency:
   group: skill-release-${{ github.ref }}
   cancel-in-progress: false
@@ -38,7 +36,7 @@ jobs:
       - name: Verify signing key consistency (repo + docs)
         run: ./scripts/ci/verify_signing_key_consistency.sh
 
-      - name: Validate version parity for changed skills
+      - name: Validate version parity for bumped skills
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}
           HEAD_SHA: ${{ github.event.pull_request.head.sha }}
@@ -73,20 +71,13 @@ jobs:
             rm -f "$tmp_file"
           }
 
-          escape_regex() {
-            printf '%s' "$1" | sed -e 's/[][(){}.^$*+?|\\]/\\&/g'
-          }
-
           touched_skills_file="$(mktemp)"
-          git diff --name-only "${BASE_SHA}...${HEAD_SHA}" -- \
-            'skills/*/**' \
-            ':(exclude)skills/*/test/**' \
-            ':(exclude)skills/*/tests/**' \
+          git diff --name-only "${BASE_SHA}...${HEAD_SHA}" -- 'skills/*/skill.json' 'skills/*/SKILL.md' \
             | awk -F/ 'NF >= 3 {print $1 "/" $2}' \
             | sort -u > "${touched_skills_file}"
 
           if [ ! -s "${touched_skills_file}" ]; then
-            echo "No release-relevant skill package files changed in this PR."
+            echo "No skill metadata files changed in this PR."
             rm -f "${touched_skills_file}"
             exit 0
           fi
@@ -99,39 +90,21 @@ jobs:
             md_path="${skill_dir}/SKILL.md"
 
             head_json_version=""
-            head_has_json=false
             if [ -f "${json_path}" ]; then
-              head_has_json=true
               head_json_version="$(jq -r '.version // empty' "${json_path}" 2>/dev/null || true)"
             fi
 
             head_md_version=""
-            head_has_md=false
             if [ -f "${md_path}" ]; then
-              head_has_md=true
               head_md_version="$(get_md_version "${md_path}")"
             fi
 
             base_json_version=""
-            base_has_json=false
             if git cat-file -e "${BASE_SHA}:${json_path}" 2>/dev/null; then
-              base_has_json=true
               base_json_version="$(git show "${BASE_SHA}:${json_path}" | jq -r '.version // empty' 2>/dev/null || true)"
             fi
 
-            base_md_version=""
-            base_has_md=false
-            if git cat-file -e "${BASE_SHA}:${md_path}" 2>/dev/null; then
-              base_has_md=true
-              base_md_version="$(get_md_version_from_git "${BASE_SHA}" "${md_path}")"
-            fi
-
-            if [ "${base_has_json}" = "true" ] && [ "${base_has_md}" = "true" ] && [ "${head_has_json}" != "true" ] && [ "${head_has_md}" != "true" ]; then
-              echo "Skill ${skill_dir} was removed in this PR; skipping version parity check."
-              continue
-            fi
-
-            checked_skills=$((checked_skills + 1))
+            base_md_version="$(get_md_version_from_git "${BASE_SHA}" "${md_path}")"
 
             json_version_changed=false
             md_version_changed=false
@@ -145,11 +118,11 @@ jobs:
             fi
 
             if [ "${json_version_changed}" != "true" ] && [ "${md_version_changed}" != "true" ]; then
-              echo "::error file=${skill_dir}::Changed skill package has no version bump. Update skill.json and SKILL.md versions and add CHANGELOG.md release notes."
-              failures=$((failures + 1))
+              echo "No version bump detected for ${skill_dir}; skipping."
               continue
             fi
 
+            checked_skills=$((checked_skills + 1))
             echo "Version bump detected for ${skill_dir} (skill.json changed: ${json_version_changed}, SKILL.md changed: ${md_version_changed})"
 
             if [ ! -f "${json_path}" ]; then
@@ -183,36 +156,6 @@ jobs:
             fi
 
             echo "Version parity OK for ${skill_dir}: ${head_json_version}"
-
-            changelog_path="${skill_dir}/CHANGELOG.md"
-            if [ ! -f "${changelog_path}" ]; then
-              echo "::error file=${changelog_path}::Missing CHANGELOG.md for bumped skill version ${head_json_version}."
-              failures=$((failures + 1))
-              continue
-            fi
-
-            escaped_version="$(escape_regex "${head_json_version}")"
-            if ! grep -Eq "^## \\[${escaped_version}\\] - [0-9]{4}-[0-9]{2}-[0-9]{2}$" "${changelog_path}"; then
-              echo "::error file=${changelog_path}::Missing required release-notes heading: ## [${head_json_version}] - YYYY-MM-DD"
-              failures=$((failures + 1))
-              continue
-            fi
-
-            changelog_entry="$(awk -v version="${head_json_version}" '
-              BEGIN { in_section = 0; found = 0 }
-              $0 ~ ("^## \\[" version "\\] - [0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]$") { in_section = 1; found = 1; next }
-              in_section && found && /^---/ { exit }
-              in_section && found && /^## / { exit }
-              in_section { print }
-            ' "${changelog_path}" | sed -e :a -e '/^\n*$/{$d;N;ba' -e '}')"
-
-            if [ -z "${changelog_entry}" ]; then
-              echo "::error file=${changelog_path}::Changelog entry for ${head_json_version} is empty. Add release notes under the version heading."
-              failures=$((failures + 1))
-              continue
-            fi
-
-            echo "Release notes check OK for ${skill_dir}: ${head_json_version}"
           done < "${touched_skills_file}"
 
           rm -f "${touched_skills_file}"
@@ -223,11 +166,11 @@ jobs:
           fi
 
           if [ "${failures}" -gt 0 ]; then
-            echo "::error::Found ${failures} skill metadata/release-notes issue(s) across ${checked_skills} bumped skill(s)."
+            echo "::error::Found ${failures} version parity issue(s) across ${checked_skills} bumped skill(s)."
             exit 1
           fi
 
-          echo "Validated ${checked_skills} bumped skill(s): version parity and changelog release notes are present."
+          echo "Validated ${checked_skills} bumped skill(s): skill.json and SKILL.md versions are present and equal."
 
   release:
     if: github.event_name == 'pull_request'
@@ -350,20 +293,6 @@ jobs:
             ' "$md_file"
           }
 
-          get_md_version_from_git() {
-            local sha="$1"
-            local path="$2"
-            local tmp_file
-            tmp_file="$(mktemp)"
-
-            if git cat-file -e "${sha}:${path}" 2>/dev/null; then
-              git show "${sha}:${path}" > "$tmp_file"
-              get_md_version "$tmp_file"
-            fi
-
-            rm -f "$tmp_file"
-          }
-
           touched_skills_file="$(mktemp)"
           git diff --name-only "${BASE_SHA}...${HEAD_SHA}" -- 'skills/*/skill.json' 'skills/*/SKILL.md' \
             | awk -F/ 'NF >= 3 {print $1 "/" $2}' \
@@ -379,79 +308,20 @@ jobs:
           failures=0
           mkdir -p dist/dry-run
 
-          normalize_release_path() {
-            local path="$1"
-            path="${path//\\//}"
-            while [[ "$path" == ./* ]]; do
-              path="${path#./}"
-            done
-            while [[ "$path" == *//* ]]; do
-              path="${path//\/\//\/}"
-            done
-            if [[ -z "$path" || "$path" == /* || "$path" == [A-Za-z]:* || "$path" == ".." || "$path" == ../* || "$path" == */.. || "$path" == */../* ]]; then
-              return 1
-            fi
-            printf '%s\n' "$path"
-          }
-
-          is_test_release_path() {
-            local lower="${1,,}"
-            [[ "$lower" == test/* || "$lower" == tests/* || "$lower" == */test/* || "$lower" == */tests/* ]]
-          }
-
           while IFS= read -r skill_dir; do
             json_path="${skill_dir}/skill.json"
             md_path="${skill_dir}/SKILL.md"
 
             head_json_version=""
-            head_has_json=false
             if [ -f "${json_path}" ]; then
-              head_has_json=true
               head_json_version="$(jq -r '.version // empty' "${json_path}" 2>/dev/null || true)"
             fi
 
             head_md_version=""
-            head_has_md=false
             if [ -f "${md_path}" ]; then
-              head_has_md=true
               head_md_version="$(get_md_version "${md_path}")"
             fi
 
-            base_json_version=""
-            base_has_json=false
-            if git cat-file -e "${BASE_SHA}:${json_path}" 2>/dev/null; then
-              base_has_json=true
-              base_json_version="$(git show "${BASE_SHA}:${json_path}" | jq -r '.version // empty' 2>/dev/null || true)"
-            fi
-
-            base_md_version=""
-            base_has_md=false
-            if git cat-file -e "${BASE_SHA}:${md_path}" 2>/dev/null; then
-              base_has_md=true
-              base_md_version="$(get_md_version_from_git "${BASE_SHA}" "${md_path}")"
-            fi
-
-            if [ "${base_has_json}" = "true" ] && [ "${base_has_md}" = "true" ] && [ "${head_has_json}" != "true" ] && [ "${head_has_md}" != "true" ]; then
-              echo "Skill ${skill_dir} was removed in this PR; skipping dry-run."
-              continue
-            fi
-
-            json_version_changed=false
-            md_version_changed=false
-
-            if [ "${head_json_version}" != "${base_json_version}" ]; then
-              json_version_changed=true
-            fi
-
-            if [ "${head_md_version}" != "${base_md_version}" ]; then
-              md_version_changed=true
-            fi
-
-            if [ "${json_version_changed}" != "true" ] && [ "${md_version_changed}" != "true" ]; then
-              echo "No version bump detected for ${skill_dir}; skipping dry-run."
-              continue
-            fi
-
             if [ -z "${head_json_version}" ] || [ -z "${head_md_version}" ] || [ "${head_json_version}" != "${head_md_version}" ]; then
               echo "::error file=${skill_dir}::Version metadata is invalid for dry-run. Ensure validate-pr-version-sync passes."
               failures=$((failures + 1))
@@ -501,17 +371,8 @@ jobs:
             temp_sbom_file="$(mktemp)"
             jq -r '.sbom.files[].path' "${json_path}" > "${temp_sbom_file}"
 
-            while IFS= read -r raw_file; do
-              [ -z "${raw_file}" ] && continue
-              if ! file="$(normalize_release_path "${raw_file}")"; then
-                echo "::error file=${json_path}::SBOM references unsafe file path: ${raw_file}"
-                failures=$((failures + 1))
-                continue
-              fi
-              if is_test_release_path "${file}"; then
-                echo "  [Dry-run] Skipping test-only release file: ${file}"
-                continue
-              fi
+            while IFS= read -r file; do
+              [ -z "${file}" ] && continue
               full_path="${skill_dir}/${file}"
               if [ -f "${full_path}" ]; then
                 mkdir -p "${inner_dir}/$(dirname "${file}")"
@@ -534,17 +395,9 @@ jobs:
               echo "  [Dry-run] Removed test signatures from release staging"
             fi
 
-            # --- Verify staged runtime import closure before archiving ---
-            python3 scripts/ci/verify_skill_release_import_closure.py "${inner_dir}"
-
             # --- Create zip preserving directory structure ---
             zip_name="${skill_name}-v${version}.zip"
             (cd "${staging_dir}" && zip -qr "${OLDPWD}/${out_assets}/${zip_name}" .)
-            if unzip -Z1 "${out_assets}/${zip_name}" | grep -Eiq '(^|/)(test|tests)/'; then
-              echo "::error::Dry-run release archive contains test-only files: ${zip_name}"
-              unzip -Z1 "${out_assets}/${zip_name}" | grep -Ei '(^|/)(test|tests)/' || true
-              failures=$((failures + 1))
-            fi
 
             # --- Clean up test artifacts from source directory ---
             if [ -d "${skill_dir}/advisories" ]; then
@@ -556,14 +409,8 @@ jobs:
 
             # --- Generate checksums.json via jq ---
             files_json="{}"
-            while IFS= read -r raw_file; do
-              [ -z "${raw_file}" ] && continue
-              if ! file="$(normalize_release_path "${raw_file}")"; then
-                continue
-              fi
-              if is_test_release_path "${file}"; then
-                continue
-              fi
+            while IFS= read -r file; do
+              [ -z "${file}" ] && continue
               full_path="${skill_dir}/${file}"
               if [ -f "${full_path}" ]; then
                 sha256="$(sha256sum "${full_path}" | awk '{print $1}')"
@@ -646,7 +493,7 @@ jobs:
           fi
 
           if [ "${dry_run_count}" -eq 0 ]; then
-            echo "No version bumps detected in changed skill metadata files."
+            echo "No changed skills found for dry-run."
             exit 0
           fi
 
@@ -662,8 +509,6 @@ jobs:
       version: ${{ steps.parse.outputs.version }}
       skill_path: ${{ steps.parse.outputs.skill_path }}
       publishable: ${{ steps.publishable.outputs.publishable }}
-      openclaw_skill: ${{ steps.publishable.outputs.openclaw_skill }}
-      publish_clawhub: ${{ steps.publishable.outputs.publish_clawhub }}
     steps:
       - name: Parse tag
         id: parse
@@ -735,39 +580,26 @@ jobs:
               echo "SKILL.md version validated: $MD_VERSION"
             fi
           else
-            echo "::error::Missing required SKILL.md: $SKILL_PATH/SKILL.md"
-            exit 1
+            echo "No SKILL.md found, skipping frontmatter validation"
           fi
 
-      - name: Detect publishability and install defaults
+      - name: Detect publishability
         id: publishable
         run: |
           SKILL_PATH="${{ steps.parse.outputs.skill_path }}"
-          INTERNAL=$(jq -r 'if (.openclaw | type) == "object" then (.openclaw.internal // false) else false end' "$SKILL_PATH/skill.json")
-
-          OPENCLAW_SKILL=false
-          if jq -e '(.openclaw | type == "object") and ((.openclaw | length) > 0)' "$SKILL_PATH/skill.json" >/dev/null; then
-            OPENCLAW_SKILL=true
-          fi
+          INTERNAL=$(jq -r '.openclaw.internal // false' "$SKILL_PATH/skill.json")
 
           PUBLISHABLE=true
           if [ "$INTERNAL" = "true" ]; then
             PUBLISHABLE=false
-            echo "Skill marked internal=true; will skip ClawHub publishing."
-          fi
-
-          PUBLISH_CLAWHUB=false
-          if [ "$PUBLISHABLE" = "true" ]; then
-            PUBLISH_CLAWHUB=true
+            echo "Skill marked internal=true; will skip ClawHub publish."
           fi
 
           echo "internal=${INTERNAL}" >> $GITHUB_OUTPUT
-          echo "openclaw_skill=${OPENCLAW_SKILL}" >> $GITHUB_OUTPUT
-          echo "publish_clawhub=${PUBLISH_CLAWHUB}" >> $GITHUB_OUTPUT
           echo "publishable=${PUBLISHABLE}" >> $GITHUB_OUTPUT
 
       - name: Setup Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: 20
 
@@ -850,26 +682,6 @@ jobs:
 
           mkdir -p release-assets
 
-          normalize_release_path() {
-            local path="$1"
-            path="${path//\\//}"
-            while [[ "$path" == ./* ]]; do
-              path="${path#./}"
-            done
-            while [[ "$path" == *//* ]]; do
-              path="${path//\/\//\/}"
-            done
-            if [[ -z "$path" || "$path" == /* || "$path" == [A-Za-z]:* || "$path" == ".." || "$path" == ../* || "$path" == */.. || "$path" == */../* ]]; then
-              return 1
-            fi
-            printf '%s\n' "$path"
-          }
-
-          is_test_release_path() {
-            local lower="${1,,}"
-            [[ "$lower" == test/* || "$lower" == tests/* || "$lower" == */test/* || "$lower" == */tests/* ]]
-          }
-
           # --- Stage SBOM files preserving directory structure ---
           STAGING_DIR="$(mktemp -d)"
           INNER_DIR="$STAGING_DIR/$SKILL_NAME"
@@ -877,16 +689,8 @@ jobs:
           TEMPFILE="$(mktemp)"
           jq -r '.sbom.files[].path' "$SKILL_PATH/skill.json" > "$TEMPFILE"
 
-          while IFS= read -r raw_file; do
-            [ -z "$raw_file" ] && continue
-            if ! file="$(normalize_release_path "$raw_file")"; then
-              echo "::error file=$SKILL_PATH/skill.json::SBOM references unsafe file path: $raw_file"
-              exit 1
-            fi
-            if is_test_release_path "$file"; then
-              echo "Skipping test-only release file: $file"
-              continue
-            fi
+          while IFS= read -r file; do
+            [ -z "$file" ] && continue
             FULL_PATH="$SKILL_PATH/$file"
             if [ -f "$FULL_PATH" ]; then
               mkdir -p "$INNER_DIR/$(dirname "$file")"
@@ -899,28 +703,14 @@ jobs:
 
           cp "$SKILL_PATH/skill.json" "$INNER_DIR/skill.json"
 
-          # --- Verify staged runtime import closure before archiving ---
-          python3 scripts/ci/verify_skill_release_import_closure.py "$INNER_DIR"
-
           # --- Create zip preserving directory structure ---
           ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"
           (cd "$STAGING_DIR" && zip -qr "$OLDPWD/release-assets/$ZIP_NAME" .)
-          if unzip -Z1 "release-assets/$ZIP_NAME" | grep -Eiq '(^|/)(test|tests)/'; then
-            echo "::error::Release archive contains test-only files: $ZIP_NAME"
-            unzip -Z1 "release-assets/$ZIP_NAME" | grep -Ei '(^|/)(test|tests)/' || true
-            exit 1
-          fi
 
           # --- Generate checksums.json via jq ---
           FILES_JSON="{}"
-          while IFS= read -r raw_file; do
-            [ -z "$raw_file" ] && continue
-            if ! file="$(normalize_release_path "$raw_file")"; then
-              continue
-            fi
-            if is_test_release_path "$file"; then
-              continue
-            fi
+          while IFS= read -r file; do
+            [ -z "$file" ] && continue
             FULL_PATH="$SKILL_PATH/$file"
             if [ -f "$FULL_PATH" ]; then
               SHA256=$(sha256sum "$FULL_PATH" | awk '{print $1}')
@@ -1022,8 +812,9 @@ jobs:
           VERSION="${{ steps.parse.outputs.version }}"
 
           if [ ! -f "$SKILL_PATH/CHANGELOG.md" ]; then
-            echo "::error::Missing required changelog file: $SKILL_PATH/CHANGELOG.md"
-            exit 1
+            echo "No CHANGELOG.md found"
+            echo "changelog=" >> $GITHUB_OUTPUT
+            exit 0
           fi
 
           # Extract the changelog section for this version
@@ -1037,86 +828,20 @@ jobs:
           ' "$SKILL_PATH/CHANGELOG.md" | sed -e :a -e '/^\n*$/{$d;N;ba' -e '}')
 
           if [ -z "$CHANGELOG_ENTRY" ]; then
-            echo "::error::No changelog entry found for version $VERSION in $SKILL_PATH/CHANGELOG.md"
-            echo "::error::Expected heading format: ## [$VERSION] - YYYY-MM-DD"
-            exit 1
+            echo "No changelog entry found for version $VERSION"
+            echo "changelog=" >> $GITHUB_OUTPUT
+          else
+            echo "Found changelog entry for version $VERSION"
+            # Use multiline output format for GitHub Actions
+            {
+              echo "changelog<<EOF"
+              echo "$CHANGELOG_ENTRY"
+              echo "EOF"
+            } >> $GITHUB_OUTPUT
           fi
 
-          echo "Found changelog entry for version $VERSION"
-          # Use multiline output format for GitHub Actions
-          {
-            echo "changelog<<EOF"
-            echo "$CHANGELOG_ENTRY"
-            echo "EOF"
-          } >> $GITHUB_OUTPUT
-
-      - name: Build quick install instructions
-        id: install
-        run: |
-          set -euo pipefail
-          SKILL_NAME="${{ steps.parse.outputs.skill_name }}"
-          VERSION="${{ steps.parse.outputs.version }}"
-          REPO="${{ github.repository }}"
-          TAG="${{ github.ref_name }}"
-
-          {
-            echo "quick_install<<INSTALL_EOF"
-
-            if [ "${{ steps.publishable.outputs.publish_clawhub }}" = "true" ] && [ "${{ steps.publishable.outputs.openclaw_skill }}" = "true" ]; then
-              cat <<EOF
-          ### Quick Install
-
-          **Via ClawHub (recommended):**
-          \`\`\`bash
-          npx clawhub@latest install ${SKILL_NAME}
-          \`\`\`
-
-          **If you already have \`clawsec-suite\` installed:**
-          Ask your agent to pull \`${SKILL_NAME}\` from the ClawSec catalog and it will handle setup and verification automatically.
-          EOF
-            else
-              cat <<EOF
-          ### Quick Install
-
-          **GitHub release artifact (recommended):**
-          Ask your agent to read the published skill instructions from this GitHub release and follow them:
-
-          https://github.com/${REPO}/releases/download/${TAG}/SKILL.md
-
-          Or download them locally:
-          \`\`\`bash
-          curl -sLO https://github.com/${REPO}/releases/download/${TAG}/SKILL.md
-          \`\`\`
-          EOF
-            fi
-
-            cat <<EOF
-
-          **Manual download with verification:**
-          \`\`\`bash
-          # 1. Download the release archive, checksums, and signing material
-          curl -sLO https://github.com/${REPO}/releases/download/${TAG}/${SKILL_NAME}-v${VERSION}.zip
-          curl -sLO https://github.com/${REPO}/releases/download/${TAG}/checksums.json
-          curl -sLO https://github.com/${REPO}/releases/download/${TAG}/checksums.sig
-          curl -sLO https://github.com/${REPO}/releases/download/${TAG}/signing-public.pem
-
-          # 2. Verify the checksums manifest signature (Ed25519)
-          openssl base64 -d -A -in checksums.sig -out checksums.sig.bin
-          openssl pkeyutl -verify -rawin -pubin -inkey signing-public.pem -sigfile checksums.sig.bin -in checksums.json
-
-          # 3. Verify archive checksum from the signed manifest
-          echo "\$(jq -r '.archive.sha256' checksums.json)  ${SKILL_NAME}-v${VERSION}.zip" | sha256sum -c
-
-          # 4. Extract (creates ${SKILL_NAME}/ directory)
-          unzip ${SKILL_NAME}-v${VERSION}.zip
-          \`\`\`
-          EOF
-
-            echo "INSTALL_EOF"
-          } >> "$GITHUB_OUTPUT"
-
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
         with:
           name: "${{ steps.parse.outputs.skill_name }} ${{ steps.parse.outputs.version }}"
           tag_name: ${{ github.ref_name }}
@@ -1126,7 +851,31 @@ jobs:
 
             ${{ steps.changelog.outputs.changelog }}
 
-            ${{ steps.install.outputs.quick_install }}
+            ### Quick Install
+
+            **Via clawhub (recommended):**
+            ```bash
+            npx clawhub@latest install ${{ steps.parse.outputs.skill_name }}
+            ```
+
+            **Manual download with verification:**
+            ```bash
+            # 1. Download the release archive, checksums, and signing material
+            curl -sLO https://github.com/${{ github.repository }}/releases/download/${{ github.ref_name }}/${{ steps.parse.outputs.skill_name }}-v${{ steps.parse.outputs.version }}.zip
+            curl -sLO https://github.com/${{ github.repository }}/releases/download/${{ github.ref_name }}/checksums.json
+            curl -sLO https://github.com/${{ github.repository }}/releases/download/${{ github.ref_name }}/checksums.sig
+            curl -sLO https://github.com/${{ github.repository }}/releases/download/${{ github.ref_name }}/signing-public.pem
+
+            # 2. Verify the checksums manifest signature (Ed25519)
+            openssl base64 -d -A -in checksums.sig -out checksums.sig.bin
+            openssl pkeyutl -verify -rawin -pubin -inkey signing-public.pem -sigfile checksums.sig.bin -in checksums.json
+
+            # 3. Verify archive checksum from the signed manifest
+            echo "$(jq -r '.archive.sha256' checksums.json)  ${{ steps.parse.outputs.skill_name }}-v${{ steps.parse.outputs.version }}.zip" | sha256sum -c
+
+            # 4. Extract (creates ${{ steps.parse.outputs.skill_name }}/ directory)
+            unzip ${{ steps.parse.outputs.skill_name }}-v${{ steps.parse.outputs.version }}.zip
+            ```
 
             ### Verification
 
@@ -1203,71 +952,27 @@ jobs:
       CLAWHUB_TOKEN: ${{ secrets.CLAWHUB_TOKEN }}
     steps:
       - name: Check if publishable
-        if: needs.release-tag.outputs.publish_clawhub != 'true'
+        if: needs.release-tag.outputs.publishable != 'true'
         run: |
-          echo "Skill is not eligible for ClawHub publishing; skipping"
+          echo "Skill marked as internal, skipping ClawHub publish"
           exit 0
 
       - name: Checkout
-        if: needs.release-tag.outputs.publish_clawhub == 'true'
+        if: needs.release-tag.outputs.publishable == 'true'
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup Node
-        if: needs.release-tag.outputs.publish_clawhub == 'true'
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        if: needs.release-tag.outputs.publishable == 'true'
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: 20
 
       - name: Install clawhub CLI
-        if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
-        run: npm install -g clawhub@${CLAWHUB_CLI_VERSION}
-
-      - name: Patch clawhub publish payload workaround
-        # Temporary: clawhub@0.7.0 publish payload is missing acceptLicenseTerms.
-        if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
-        run: |
-          node <<'NODE'
-          const { execSync } = require("node:child_process");
-          const fs = require("node:fs");
-          const path = require("node:path");
-
-          const npmRoot = execSync("npm root -g", { encoding: "utf8" }).trim();
-          const publishScriptPath = path.join(
-            npmRoot,
-            "clawhub",
-            "dist",
-            "cli",
-            "commands",
-            "publish.js"
-          );
-
-          if (!fs.existsSync(publishScriptPath)) {
-            throw new Error(`clawhub publish script not found: ${publishScriptPath}`);
-          }
-
-          const original = fs.readFileSync(publishScriptPath, "utf8");
-          if (original.includes("acceptLicenseTerms: true")) {
-            console.log(`[patch-clawhub] Already patched: ${publishScriptPath}`);
-            process.exit(0);
-          }
-
-          const payloadPattern = /changelog,\r?\n(\s*)tags,/;
-          if (!payloadPattern.test(original)) {
-            throw new Error(
-              `[patch-clawhub] Could not find expected publish payload pattern in ${publishScriptPath}`
-            );
-          }
-
-          const patched = original.replace(
-            payloadPattern,
-            (_, indent) => `changelog,\n${indent}acceptLicenseTerms: true,\n${indent}tags,`
-          );
-          fs.writeFileSync(publishScriptPath, patched, "utf8");
-          console.log(`[patch-clawhub] Patched: ${publishScriptPath}`);
-          NODE
+        if: needs.release-tag.outputs.publishable == 'true' && env.CLAWHUB_TOKEN != ''
+        run: npm install -g clawhub@0.7.0
 
       - name: Login to ClawHub
-        if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
+        if: needs.release-tag.outputs.publishable == 'true' && env.CLAWHUB_TOKEN != ''
         run: |
           set -euo pipefail
           SITE=${CLAWHUB_SITE:-https://clawhub.ai}
@@ -1277,38 +982,8 @@ jobs:
           CLAWHUB_DISABLE_TELEMETRY=1 CLAWHUB_SITE="$SITE" CLAWHUB_REGISTRY="$REGISTRY" \
             clawhub login --token "$CLAWHUB_TOKEN" --site "$SITE" --no-input
 
-      - name: Guard duplicate ClawHub version
-        if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
-        run: |
-          set -euo pipefail
-          SITE=${CLAWHUB_SITE:-https://clawhub.ai}
-          REGISTRY=${CLAWHUB_REGISTRY:-$SITE}
-          SKILL_NAME="${{ needs.release-tag.outputs.skill_name }}"
-          VERSION="${{ needs.release-tag.outputs.version }}"
-          export CLAWHUB_CONFIG_PATH="$HOME/.clawhub-ci/config.json"
-
-          set +e
-          CLAWHUB_DISABLE_TELEMETRY=1 CLAWHUB_SITE="$SITE" CLAWHUB_REGISTRY="$REGISTRY" \
-            clawhub inspect "$SKILL_NAME" --version "$VERSION" --json \
-            > /tmp/clawhub-existing-version.json 2> /tmp/clawhub-existing-version.err
-          STATUS=$?
-          set -e
-
-          if [ "$STATUS" -eq 0 ]; then
-            echo "::error::ClawHub already contains ${SKILL_NAME}@${VERSION}. Bump the version before tagging."
-            exit 1
-          fi
-
-          if grep -Eqi "Version not found|Skill not found" /tmp/clawhub-existing-version.err; then
-            echo "No existing ${SKILL_NAME}@${VERSION} detected in ClawHub. Proceeding."
-          else
-            echo "::error::Failed to verify ClawHub version precondition."
-            cat /tmp/clawhub-existing-version.err
-            exit 1
-          fi
-
       - name: Publish to ClawHub
-        if: needs.release-tag.outputs.publish_clawhub == 'true' && env.CLAWHUB_TOKEN != ''
+        if: needs.release-tag.outputs.publishable == 'true' && env.CLAWHUB_TOKEN != ''
         run: |
           set -euo pipefail
           SITE=${CLAWHUB_SITE:-https://clawhub.ai}
@@ -1321,6 +996,7 @@ jobs:
 
           export CLAWHUB_CONFIG_PATH="$HOME/.clawhub-ci/config.json"
 
+          # Publish with idempotent retry handling
           if ! CLAWHUB_DISABLE_TELEMETRY=1 CLAWHUB_SITE="$SITE" CLAWHUB_REGISTRY="$REGISTRY" \
             clawhub publish "$SKILL_PATH" \
               --slug "$SKILL_NAME" \
@@ -1329,8 +1005,15 @@ jobs:
               --changelog "$CHANGELOG" \
               --tags "latest" \
               --no-input 2>&1 | tee /tmp/clawhub-publish.log; then
-            echo "::error::ClawHub publish failed. Check logs above for details."
-            exit 1
+
+            # Check if it's a "version already exists" error (which means previous run partially succeeded)
+            if grep -qi "version already exists" /tmp/clawhub-publish.log; then
+              echo "::warning::Version $VERSION already published to ClawHub (from previous run)"
+              exit 0
+            else
+              echo "::error::ClawHub publish failed. Check logs above for details."
+              exit 1
+            fi
           fi
 
           echo "✓ Successfully published $SKILL_NAME@$VERSION to ClawHub"
@@ -1382,7 +1065,7 @@ jobs:
         id: publishable
         run: |
           SKILL_PATH="${{ steps.parse.outputs.skill_path }}"
-          INTERNAL=$(jq -r 'if (.openclaw | type) == "object" then (.openclaw.internal // false) else false end' "$SKILL_PATH/skill.json")
+          INTERNAL=$(jq -r '.openclaw.internal // false' "$SKILL_PATH/skill.json")
 
           if [ "$INTERNAL" = "true" ]; then
             echo "::error::Skill is marked internal and cannot be published to ClawHub"
@@ -1392,55 +1075,12 @@ jobs:
           echo "Skill is publishable to ClawHub"
 
       - name: Setup Node
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: 20
 
       - name: Install clawhub CLI
-        run: npm install -g clawhub@${CLAWHUB_CLI_VERSION}
-
-      - name: Patch clawhub publish payload workaround
-        # Temporary: clawhub@0.7.0 publish payload is missing acceptLicenseTerms.
-        run: |
-          node <<'NODE'
-          const { execSync } = require("node:child_process");
-          const fs = require("node:fs");
-          const path = require("node:path");
-
-          const npmRoot = execSync("npm root -g", { encoding: "utf8" }).trim();
-          const publishScriptPath = path.join(
-            npmRoot,
-            "clawhub",
-            "dist",
-            "cli",
-            "commands",
-            "publish.js"
-          );
-
-          if (!fs.existsSync(publishScriptPath)) {
-            throw new Error(`clawhub publish script not found: ${publishScriptPath}`);
-          }
-
-          const original = fs.readFileSync(publishScriptPath, "utf8");
-          if (original.includes("acceptLicenseTerms: true")) {
-            console.log(`[patch-clawhub] Already patched: ${publishScriptPath}`);
-            process.exit(0);
-          }
-
-          const payloadPattern = /changelog,\r?\n(\s*)tags,/;
-          if (!payloadPattern.test(original)) {
-            throw new Error(
-              `[patch-clawhub] Could not find expected publish payload pattern in ${publishScriptPath}`
-            );
-          }
-
-          const patched = original.replace(
-            payloadPattern,
-            (_, indent) => `changelog,\n${indent}acceptLicenseTerms: true,\n${indent}tags,`
-          );
-          fs.writeFileSync(publishScriptPath, patched, "utf8");
-          console.log(`[patch-clawhub] Patched: ${publishScriptPath}`);
-          NODE
+        run: npm install -g clawhub@0.7.0
 
       - name: Login to ClawHub
         run: |

.github/workflows/wiki-sync.yml

@@ -1,73 +0,0 @@
-name: Sync Wiki
-
-on:
-  push:
-    branches: [main]
-    paths:
-      - 'wiki/**'
-  workflow_dispatch:
-
-permissions:
-  contents: write
-
-concurrency:
-  group: wiki-sync
-  cancel-in-progress: false
-
-jobs:
-  sync-wiki:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Sync wiki folder to repository wiki
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          set -euo pipefail
-
-          if [ ! -d wiki ]; then
-            echo "::error::wiki/ directory not found"
-            exit 1
-          fi
-
-          # GitHub Wiki root (/wiki) renders Home.md, not INDEX.md.
-          # INDEX.md is the canonical source; generate Home.md from it.
-          if [ ! -f wiki/INDEX.md ]; then
-            echo "::error::wiki/INDEX.md not found. It is required to generate wiki/Home.md."
-            exit 1
-          fi
-          cp wiki/INDEX.md wiki/Home.md
-
-          WIKI_REMOTE="https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.wiki.git"
-          if ! git ls-remote "$WIKI_REMOTE" >/dev/null 2>&1; then
-            echo "::warning::Wiki remote unavailable (repository wiki may be disabled). Skipping sync."
-            exit 0
-          fi
-
-          WIKI_TMP="$(mktemp -d)"
-          trap 'rm -rf "$WIKI_TMP"' EXIT
-
-          git clone --depth 1 "$WIKI_REMOTE" "$WIKI_TMP"
-          rsync -a --delete --exclude '.git/' wiki/ "$WIKI_TMP/"
-
-          cd "$WIKI_TMP"
-          if [ -z "$(git status --porcelain)" ]; then
-            echo "No wiki changes to sync."
-            exit 0
-          fi
-
-          WIKI_HEAD_REF="$(git symbolic-ref --short refs/remotes/origin/HEAD 2>/dev/null || true)"
-          if [ -n "$WIKI_HEAD_REF" ]; then
-            WIKI_BRANCH="${WIKI_HEAD_REF#origin/}"
-          else
-            WIKI_BRANCH="master"
-          fi
-
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git add -A
-          git commit -m "docs(wiki): sync from ${GITHUB_SHA}"
-          # Clone may sanitize credentials from origin URL; push with explicit auth URL.
-          git push "$WIKI_REMOTE" HEAD:"$WIKI_BRANCH"

.gitignore

@@ -1,5 +1,4 @@
 .claude
-.auto-claude/
 .codex
 _bmad
 _bmad-output
@@ -25,7 +24,6 @@ dist-ssr
 # Derived public assets (copied during build)
 public/advisories
 public/skills
-public/wiki/
 
 # Python bytecode
 __pycache__/
@@ -41,13 +39,3 @@ __pycache__/
 *.njsproj
 *.sln
 *.sw?
-clawsec-signing-private.pem
-
-# Auto Claude generated files
-.auto-claude/
-.auto-claude-security.json
-.auto-claude-status
-.claude_settings.json
-.worktrees/
-.security-key
-logs/security/

AGENTS.md

@@ -1,63 +1,12 @@
-# Repository Guidelines
-
-## Project Structure & Module Organization
-ClawSec combines a Vite + React frontend with security skill packages and release tooling.
-- Frontend entrypoints: `index.tsx`, `App.tsx`
-- UI and routes: `components/`, `pages/`
-- Shared types/constants: `types.ts`, `constants.ts`
-- Wiki source docs: `wiki/` (synced to GitHub Wiki by `.github/workflows/wiki-sync.yml`)
-- Generated wiki exports: `public/wiki/` (`llms.txt` outputs; generated locally/CI and gitignored)
-- Skills: `skills/<skill-name>/` (`skill.json`, `SKILL.md`, optional `scripts/`, `test/`)
-- Advisory feed: `advisories/feed.json`, `advisories/feed.json.sig`
-- Automation: `scripts/`, `.github/workflows/`
-- Python utilities: `utils/validate_skill.py`, `utils/package_skill.py`
-
-## Build, Test, and Development Commands
-- `npm install`: install dependencies.
-- `npm run dev`: run local Vite server.
-- `npm run build`: create production build (CI gate).
-- `npm run preview`: preview built app.
-- `npm run gen:wiki-llms`: generate wiki `llms.txt` exports from `wiki/` into `public/wiki/`.
-- `./scripts/prepare-to-push.sh [--fix]`: run lint, types, build, and security checks.
-- `./scripts/populate-local-wiki.sh`: regenerate local wiki `llms.txt` exports for preview.
-- `npx eslint . --ext .ts,.tsx,.js,.jsx,.mjs --max-warnings 0`: lint JS/TS.
-- `npx tsc --noEmit`: type-check TypeScript.
-- `node skills/clawsec-suite/test/feed_verification.test.mjs`: run a skill-local Node test.
-- `python utils/validate_skill.py skills/<skill-name>`: validate skill schema/metadata.
-
-## Coding Style & Naming Conventions
-- Use TypeScript/TSX for frontend code and ESM for scripts.
-- Follow `eslint.config.js`; prefix intentionally unused vars/args with `_`.
-- Python under `utils/` follows `pyproject.toml` Ruff/Bandit rules (line length 120).
-- Name React files in PascalCase (for example, `SkillCard.tsx`), skill directories in kebab-case (for example, `skills/clawsec-feed`), and tests as `*.test.mjs`.
-
-## Testing Guidelines
-There is no root `npm test`; tests are mostly skill-local.
-- Run changed tests directly: `node skills/<skill>/test/<name>.test.mjs`.
-- For frontend/config changes, run ESLint, `npx tsc --noEmit`, and `npm run build`.
-- For wiki rendering/export changes, run `npm run gen:wiki-llms` and `npm run build`.
-- For Python utility updates, run `ruff check utils/` and `bandit -r utils/ -ll`.
-
-## Pull Request Guidelines
-- Follow Conventional Commits: `feat(scope): ...`, `fix(scope): ...`, `chore(scope): ...`.
-- Use skill branches like `skill/<name>-...`.
-- Keep PRs focused and include summary, security benefit, and testing performed.
-- Keep versions aligned between `skills/<skill>/skill.json` and `skills/<skill>/SKILL.md`.
-- Do not push release tags from PR branches; releases are tagged from `main`.
-- Do not commit generated `public/wiki/` artifacts; edit `wiki/` source files instead.
-
-## Agent Collaboration & Git Safety
-- Delete unused or obsolete files only when your changes make them irrelevant; revert files only when the change is yours or explicitly requested. If a git operation creates uncertainty about another agent’s in-flight work, stop and coordinate instead of deleting.
-- Before deleting any file to fix local type/lint failures, stop and ask the user.
-- Never edit `.env` or any environment variable files.
-- Coordinate with other agents before removing their in-progress edits; do not revert or delete work you did not author unless everyone agrees.
-- Moving, renaming, and restoring files is allowed when done safely.
-- Never run destructive git operations without explicit written instruction in this conversation: `git reset --hard`, `rm`, `git checkout`/`git restore` to older commits. Treat these as catastrophic; if unsure, stop and ask. In Cursor or Codex Web, use platform tooling as applicable.
-- Never use `git restore` (or similar revert commands) on files you did not author.
-- Always run `git status` before committing.
-- Keep commits atomic and commit only touched files with explicit paths.
-- For tracked files: `git commit -m "<scoped message>" -- path/to/file1 path/to/file2`.
-- For new files: `git restore --staged :/ && git add "path/to/file1" "path/to/file2" && git commit -m "<scoped message>" -- path/to/file1 path/to/file2`.
-- Quote any git path containing brackets or parentheses when staging/committing (for example, `"src/app/[candidate]/**"`).
-- For rebases, avoid editors: `GIT_EDITOR=:` and `GIT_SEQUENCE_EDITOR=:` (or `--no-edit`).
-- Never amend commits without explicit written approval in this task thread.
+- Delete unused or obsolete files when your changes make them irrelevant (refactors, feature removals, etc.), and revert files only when the change is yours or explicitly requested. If a git operation leaves you unsure about other agents' in-flight work, stop and coordinate instead of deleting.
+- **Before attempting to delete a file to resolve a local type/lint failure, stop and ask the user.** Other agents are often editing adjacent files; deleting their work to silence an error is never acceptable without explicit approval.
+- NEVER edit `.env` or any environment variable files—only the user may change them.
+- Coordinate with other agents before removing their in-progress edits—don't revert or delete work you didn't author unless everyone agrees.
+- Moving/renaming and restoring files is allowed.
+- ABSOLUTELY NEVER run destructive git operations (e.g., `git reset --hard`, `rm`, `git checkout`/`git restore` to an older commit) unless the user gives an explicit, written instruction in this conversation. Treat these commands as catastrophic; if you are even slightly unsure, stop and ask before touching them. *(When working within Cursor or Codex Web, these git limitations do not apply; use the tooling's capabilities as needed.)*
+- Never use `git restore` (or similar commands) to revert files you didn't author—coordinate with other agents instead so their in-progress work stays intact.
+- Always double-check git status before any commit
+- Keep commits atomic: commit only the files you touched and list each path explicitly. For tracked files run `git commit -m "<scoped message>" -- path/to/file1 path/to/file2`. For brand-new files, use the one-liner `git restore --staged :/ && git add "path/to/file1" "path/to/file2" && git commit -m "<scoped message>" -- path/to/file1 path/to/file2`.
+- Quote any git paths containing brackets or parentheses (e.g., `src/app/[candidate]/**`) when staging or committing so the shell does not treat them as globs or subshells.
+- When running `git rebase`, avoid opening editors—export `GIT_EDITOR=:` and `GIT_SEQUENCE_EDITOR=:` (or pass `--no-edit`) so the default messages are used automatically.
+- Never amend commits unless you have explicit written approval in the task thread.

App.tsx

@@ -6,8 +6,6 @@ import { FeedSetup } from './pages/FeedSetup';
 import { SkillsCatalog } from './pages/SkillsCatalog';
 import { SkillDetail } from './pages/SkillDetail';
 import { AdvisoryDetail } from './pages/AdvisoryDetail';
-import { WikiBrowser } from './pages/WikiBrowser';
-import { ProductDemo } from './pages/ProductDemo';
 
 const App: React.FC = () => {
   return (
@@ -19,12 +17,10 @@ const App: React.FC = () => {
           <Route path="/skills/:skillId" element={<SkillDetail />} />
           <Route path="/feed" element={<FeedSetup />} />
           <Route path="/feed/:advisoryId" element={<AdvisoryDetail />} />
-          <Route path="/demo" element={<ProductDemo />} />
-          <Route path="/wiki/*" element={<WikiBrowser />} />
         </Routes>
       </Layout>
     </Router>
   );
 };
 
-export default App;
+export default App;

CITATION.cff

@@ -1,30 +0,0 @@
-cff-version: 1.2.0
-message: "If you use ClawSec in research or security tooling, please cite it as below."
-title: "ClawSec"
-version: "0.1.0"
-date-released: "2026-05-26"
-abstract: >-
-  ClawSec is a security skill suite for AI agent platforms. It provides
-  advisory monitoring, cryptographic signature verification, guarded skill
-  installation, file integrity checks, and platform-specific security
-  capabilities for OpenClaw, NanoClaw, Hermes, and Picoclaw deployments.
-type: software
-license: "AGPL-3.0-or-later"
-url: "https://clawsec.prompt.security/"
-repository-code: "https://github.com/prompt-security/clawsec"
-keywords:
-  - ai-security
-  - agent-security
-  - prompt-injection
-  - security-advisories
-  - software-supply-chain
-  - integrity-verification
-  - openclaw
-  - nanoclaw
-  - hermes
-  - picoclaw
-authors:
-  - given-names: David
-    family-names: Abutbul
-    affiliation: "Prompt Security"
-    orcid: "https://orcid.org/0009-0001-7883-3593"

CONTRIBUTING.md

@@ -2,13 +2,8 @@
 
 Thank you for your interest in contributing security skills to the ClawSec ecosystem! This guide will walk you through creating, testing, and submitting new skills.
 
-## Wiki Documentation Source of Truth
-
-For contributor-facing wiki docs, treat `wiki/` in this repository as the single source of truth. Do not edit the GitHub Wiki directly; `.github/workflows/wiki-sync.yml` publishes `wiki/` to `<repo>.wiki.git` when `wiki/**` changes on `main`.
-
 ## Table of Contents
 
-- [Wiki Documentation Source of Truth](#wiki-documentation-source-of-truth)
 - [Getting Started](#getting-started)
 - [Skill Structure](#skill-structure)
 - [Creating a New Skill](#creating-a-new-skill)
@@ -121,7 +116,7 @@ Create `skill.json` with the following structure:
   "version": "0.0.1",
   "description": "Brief description of what your skill does",
   "author": "your-github-username",
-  "license": "AGPL-3.0-or-later",
+  "license": "MIT",
   "homepage": "https://github.com/prompt-security/clawsec",
   "keywords": ["security", "relevant", "tags"],
 
@@ -211,7 +206,7 @@ Add any additional files your skill needs (configs, templates, scripts), and **e
 | `version` | string | Semantic version (0.0.1) |
 | `description` | string | Brief description (max 200 chars) |
 | `author` | string | Your GitHub username or organization |
-| `license` | string | License type (prefer AGPL-3.0-or-later) |
+| `license` | string | License type (prefer MIT) |
 | `homepage` | string | Repository URL |
 | `keywords` | array | Searchable tags |
 | `sbom` | object | Software Bill of Materials |
@@ -493,7 +488,7 @@ cat > skills/simple-scanner/skill.json << 'EOF'
   "version": "0.0.1",
   "description": "Basic security scanner for AI agents",
   "author": "contributor-name",
-  "license": "AGPL-3.0-or-later",
+  "license": "MIT",
   "homepage": "https://github.com/prompt-security/clawsec",
   "keywords": ["security", "scanner", "basic"],
   "sbom": {
@@ -654,7 +649,7 @@ Wait for a verified patched version.
 
 Once your advisory is published:
 
-1. **Agents receive it** - The feed is served at `https://clawsec.prompt.security/advisories/feed.json` (with signature/checksum artifacts), so agents see it on their next feed check
+1. **Agents receive it** - The feed is served from raw GitHub, so agents see it on their next feed check
 2. **You're credited** - Your issue is linked in the advisory
 3. **Community is protected** - Agents using ClawSec Feed will be alerted
 

LICENSE

@@ -1,661 +1,21 @@
-                    GNU AFFERO GENERAL PUBLIC LICENSE
-                       Version 3, 19 November 2007
-
- Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-                            Preamble
-
-  The GNU Affero General Public License is a free, copyleft license for
-software and other kinds of works, specifically designed to ensure
-cooperation with the community in the case of network server software.
-
-  The licenses for most software and other practical works are designed
-to take away your freedom to share and change the works.  By contrast,
-our General Public Licenses are intended to guarantee your freedom to
-share and change all versions of a program--to make sure it remains free
-software for all its users.
-
-  When we speak of free software, we are referring to freedom, not
-price.  Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-them if you wish), that you receive source code or can get it if you
-want it, that you can change the software or use pieces of it in new
-free programs, and that you know you can do these things.
-
-  Developers that use our General Public Licenses protect your rights
-with two steps: (1) assert copyright on the software, and (2) offer
-you this License which gives you legal permission to copy, distribute
-and/or modify the software.
-
-  A secondary benefit of defending all users' freedom is that
-improvements made in alternate versions of the program, if they
-receive widespread use, become available for other developers to
-incorporate.  Many developers of free software are heartened and
-encouraged by the resulting cooperation.  However, in the case of
-software used on network servers, this result may fail to come about.
-The GNU General Public License permits making a modified version and
-letting the public access it on a server without ever releasing its
-source code to the public.
-
-  The GNU Affero General Public License is designed specifically to
-ensure that, in such cases, the modified source code becomes available
-to the community.  It requires the operator of a network server to
-provide the source code of the modified version running there to the
-users of that server.  Therefore, public use of a modified version, on
-a publicly accessible server, gives the public access to the source
-code of the modified version.
-
-  An older license, called the Affero General Public License and
-published by Affero, was designed to accomplish similar goals.  This is
-a different license, not a version of the Affero GPL, but Affero has
-released a new version of the Affero GPL which permits relicensing under
-this license.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.
-
-                       TERMS AND CONDITIONS
-
-  0. Definitions.
-
-  "This License" refers to version 3 of the GNU Affero General Public License.
-
-  "Copyright" also means copyright-like laws that apply to other kinds of
-works, such as semiconductor masks.
-
-  "The Program" refers to any copyrightable work licensed under this
-License.  Each licensee is addressed as "you".  "Licensees" and
-"recipients" may be individuals or organizations.
-
-  To "modify" a work means to copy from or adapt all or part of the work
-in a fashion requiring copyright permission, other than the making of an
-exact copy.  The resulting work is called a "modified version" of the
-earlier work or a work "based on" the earlier work.
-
-  A "covered work" means either the unmodified Program or a work based
-on the Program.
-
-  To "propagate" a work means to do anything with it that, without
-permission, would make you directly or secondarily liable for
-infringement under applicable copyright law, except executing it on a
-computer or modifying a private copy.  Propagation includes copying,
-distribution (with or without modification), making available to the
-public, and in some countries other activities as well.
-
-  To "convey" a work means any kind of propagation that enables other
-parties to make or receive copies.  Mere interaction with a user through
-a computer network, with no transfer of a copy, is not conveying.
-
-  An interactive user interface displays "Appropriate Legal Notices"
-to the extent that it includes a convenient and prominently visible
-feature that (1) displays an appropriate copyright notice, and (2)
-tells the user that there is no warranty for the work (except to the
-extent that warranties are provided), that licensees may convey the
-work under this License, and how to view a copy of this License.  If
-the interface presents a list of user commands or options, such as a
-menu, a prominent item in the list meets this criterion.
-
-  1. Source Code.
-
-  The "source code" for a work means the preferred form of the work
-for making modifications to it.  "Object code" means any non-source
-form of a work.
-
-  A "Standard Interface" means an interface that either is an official
-standard defined by a recognized standards body, or, in the case of
-interfaces specified for a particular programming language, one that
-is widely used among developers working in that language.
-
-  The "System Libraries" of an executable work include anything, other
-than the work as a whole, that (a) is included in the normal form of
-packaging a Major Component, but which is not part of that Major
-Component, and (b) serves only to enable use of the work with that
-Major Component, or to implement a Standard Interface for which an
-implementation is available to the public in source code form.  A
-"Major Component", in this context, means a major essential component
-(kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to
-produce the work, or an object code interpreter used to run it.
-
-  The "Corresponding Source" for a work in object code form means all
-the source code needed to generate, install, and (for an executable
-work) run the object code and to modify the work, including scripts to
-control those activities.  However, it does not include the work's
-System Libraries, or general-purpose tools or generally available free
-programs which are used unmodified in performing those activities but
-which are not part of the work.  For example, Corresponding Source
-includes interface definition files associated with source files for
-the work, and the source code for shared libraries and dynamically
-linked subprograms that the work is specifically designed to require,
-such as by intimate data communication or control flow between those
-subprograms and other parts of the work.
-
-  The Corresponding Source need not include anything that users
-can regenerate automatically from other parts of the Corresponding
-Source.
-
-  The Corresponding Source for a work in source code form is that
-same work.
-
-  2. Basic Permissions.
-
-  All rights granted under this License are granted for the term of
-copyright on the Program, and are irrevocable provided the stated
-conditions are met.  This License explicitly affirms your unlimited
-permission to run the unmodified Program.  The output from running a
-covered work is covered by this License only if the output, given its
-content, constitutes a covered work.  This License acknowledges your
-rights of fair use or other equivalent, as provided by copyright law.
-
-  You may make, run and propagate covered works that you do not
-convey, without conditions so long as your license otherwise remains
-in force.  You may convey covered works to others for the sole purpose
-of having them make modifications exclusively for you, or provide you
-with facilities for running those works, provided that you comply with
-the terms of this License in conveying all material for which you do
-not control copyright.  Those thus making or running the covered works
-for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of
-your copyrighted material outside their relationship with you.
-
-  Conveying under any other circumstances is permitted solely under
-the conditions stated below.  Sublicensing is not allowed; section 10
-makes it unnecessary.
-
-  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
-  No covered work shall be deemed part of an effective technological
-measure under any applicable law fulfilling obligations under article
-11 of the WIPO copyright treaty adopted on 20 December 1996, or
-similar laws prohibiting or restricting circumvention of such
-measures.
-
-  When you convey a covered work, you waive any legal power to forbid
-circumvention of technological measures to the extent such circumvention
-is effected by exercising rights under this License with respect to
-the covered work, and you disclaim any intention to limit operation or
-modification of the work as a means of enforcing, against the work's
-users, your or third parties' legal rights to forbid circumvention of
-technological measures.
-
-  4. Conveying Verbatim Copies.
-
-  You may convey verbatim copies of the Program's source code as you
-receive it, in any medium, provided that you conspicuously and
-appropriately publish on each copy an appropriate copyright notice;
-keep intact all notices stating that this License and any
-non-permissive terms added in accord with section 7 apply to the code;
-keep intact all notices of the absence of any warranty; and give all
-recipients a copy of this License along with the Program.
-
-  You may charge any price or no price for each copy that you convey,
-and you may offer support or warranty protection for a fee.
-
-  5. Conveying Modified Source Versions.
-
-  You may convey a work based on the Program, or the modifications to
-produce it from the Program, in the form of source code under the
-terms of section 4, provided that you also meet all of these conditions:
-
-    a) The work must carry prominent notices stating that you modified
-    it, and giving a relevant date.
-
-    b) The work must carry prominent notices stating that it is
-    released under this License and any conditions added under section
-    7.  This requirement modifies the requirement in section 4 to
-    "keep intact all notices".
-
-    c) You must license the entire work, as a whole, under this
-    License to anyone who comes into possession of a copy.  This
-    License will therefore apply, along with any applicable section 7
-    additional terms, to the whole of the work, and all its parts,
-    regardless of how they are packaged.  This License gives no
-    permission to license the work in any other way, but it does not
-    invalidate such permission if you have separately received it.
-
-    d) If the work has interactive user interfaces, each must display
-    Appropriate Legal Notices; however, if the Program has interactive
-    interfaces that do not display Appropriate Legal Notices, your
-    work need not make them do so.
-
-  A compilation of a covered work with other separate and independent
-works, which are not by their nature extensions of the covered work,
-and which are not combined with it such as to form a larger program,
-in or on a volume of a storage or distribution medium, is called an
-"aggregate" if the compilation and its resulting copyright are not
-used to limit the access or legal rights of the compilation's users
-beyond what the individual works permit.  Inclusion of a covered work
-in an aggregate does not cause this License to apply to the other
-parts of the aggregate.
-
-  6. Conveying Non-Source Forms.
-
-  You may convey a covered work in object code form under the terms
-of sections 4 and 5, provided that you also convey the
-machine-readable Corresponding Source under the terms of this License,
-in one of these ways:
-
-    a) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by the
-    Corresponding Source fixed on a durable physical medium
-    customarily used for software interchange.
-
-    b) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by a
-    written offer, valid for at least three years and valid for as
-    long as you offer spare parts or customer support for that product
-    model, to give anyone who possesses the object code either (1) a
-    copy of the Corresponding Source for all the software in the
-    product that is covered by this License, on a durable physical
-    medium customarily used for software interchange, for a price no
-    more than your reasonable cost of physically performing this
-    conveying of source, or (2) access to copy the
-    Corresponding Source from a network server at no charge.
-
-    c) Convey individual copies of the object code with a copy of the
-    written offer to provide the Corresponding Source.  This
-    alternative is allowed only occasionally and noncommercially, and
-    only if you received the object code with such an offer, in accord
-    with subsection 6b.
-
-    d) Convey the object code by offering access from a designated
-    place (gratis or for a charge), and offer equivalent access to the
-    Corresponding Source in the same way through the same place at no
-    further charge.  You need not require recipients to copy the
-    Corresponding Source along with the object code.  If the place to
-    copy the object code is a network server, the Corresponding Source
-    may be on a different server (operated by you or a third party)
-    that supports equivalent copying facilities, provided you maintain
-    clear directions next to the object code saying where to find the
-    Corresponding Source.  Regardless of what server hosts the
-    Corresponding Source, you remain obligated to ensure that it is
-    available for as long as needed to satisfy these requirements.
-
-    e) Convey the object code using peer-to-peer transmission, provided
-    you inform other peers where the object code and Corresponding
-    Source of the work are being offered to the general public at no
-    charge under subsection 6d.
-
-  A separable portion of the object code, whose source code is excluded
-from the Corresponding Source as a System Library, need not be
-included in conveying the object code work.
-
-  A "User Product" is either (1) a "consumer product", which means any
-tangible personal property which is normally used for personal, family,
-or household purposes, or (2) anything designed or sold for incorporation
-into a dwelling.  In determining whether a product is a consumer product,
-doubtful cases shall be resolved in favor of coverage.  For a particular
-product received by a particular user, "normally used" refers to a
-typical or common use of that class of product, regardless of the status
-of the particular user or of the way in which the particular user
-actually uses, or expects or is expected to use, the product.  A product
-is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent
-the only significant mode of use of the product.
-
-  "Installation Information" for a User Product means any methods,
-procedures, authorization keys, or other information required to install
-and execute modified versions of a covered work in that User Product from
-a modified version of its Corresponding Source.  The information must
-suffice to ensure that the continued functioning of the modified object
-code is in no case prevented or interfered with solely because
-modification has been made.
-
-  If you convey an object code work under this section in, or with, or
-specifically for use in, a User Product, and the conveying occurs as
-part of a transaction in which the right of possession and use of the
-User Product is transferred to the recipient in perpetuity or for a
-fixed term (regardless of how the transaction is characterized), the
-Corresponding Source conveyed under this section must be accompanied
-by the Installation Information.  But this requirement does not apply
-if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has
-been installed in ROM).
-
-  The requirement to provide Installation Information does not include a
-requirement to continue to provide support service, warranty, or updates
-for a work that has been modified or installed by the recipient, or for
-the User Product in which it has been modified or installed.  Access to a
-network may be denied when the modification itself materially and
-adversely affects the operation of the network or violates the rules and
-protocols for communication across the network.
-
-  Corresponding Source conveyed, and Installation Information provided,
-in accord with this section must be in a format that is publicly
-documented (and with an implementation available to the public in
-source code form), and must require no special password or key for
-unpacking, reading or copying.
-
-  7. Additional Terms.
-
-  "Additional permissions" are terms that supplement the terms of this
-License by making exceptions from one or more of its conditions.
-Additional permissions that are applicable to the entire Program shall
-be treated as though they were included in this License, to the extent
-that they are valid under applicable law.  If additional permissions
-apply only to part of the Program, that part may be used separately
-under those permissions, but the entire Program remains governed by
-this License without regard to the additional permissions.
-
-  When you convey a copy of a covered work, you may at your option
-remove any additional permissions from that copy, or from any part of
-it.  (Additional permissions may be written to require their own
-removal in certain cases when you modify the work.)  You may place
-additional permissions on material, added by you to a covered work,
-for which you have or can give appropriate copyright permission.
-
-  Notwithstanding any other provision of this License, for material you
-add to a covered work, you may (if authorized by the copyright holders of
-that material) supplement the terms of this License with terms:
-
-    a) Disclaiming warranty or limiting liability differently from the
-    terms of sections 15 and 16 of this License; or
-
-    b) Requiring preservation of specified reasonable legal notices or
-    author attributions in that material or in the Appropriate Legal
-    Notices displayed by works containing it; or
-
-    c) Prohibiting misrepresentation of the origin of that material, or
-    requiring that modified versions of such material be marked in
-    reasonable ways as different from the original version; or
-
-    d) Limiting the use for publicity purposes of names of licensors or
-    authors of the material; or
-
-    e) Declining to grant rights under trademark law for use of some
-    trade names, trademarks, or service marks; or
-
-    f) Requiring indemnification of licensors and authors of that
-    material by anyone who conveys the material (or modified versions of
-    it) with contractual assumptions of liability to the recipient, for
-    any liability that these contractual assumptions directly impose on
-    those licensors and authors.
-
-  All other non-permissive additional terms are considered "further
-restrictions" within the meaning of section 10.  If the Program as you
-received it, or any part of it, contains a notice stating that it is
-governed by this License along with a term that is a further
-restriction, you may remove that term.  If a license document contains
-a further restriction but permits relicensing or conveying under this
-License, you may add to a covered work material governed by the terms
-of that license document, provided that the further restriction does
-not survive such relicensing or conveying.
-
-  If you add terms to a covered work in accord with this section, you
-must place, in the relevant source files, a statement of the
-additional terms that apply to those files, or a notice indicating
-where to find the applicable terms.
-
-  Additional terms, permissive or non-permissive, may be stated in the
-form of a separately written license, or stated as exceptions;
-the above requirements apply either way.
-
-  8. Termination.
-
-  You may not propagate or modify a covered work except as expressly
-provided under this License.  Any attempt otherwise to propagate or
-modify it is void, and will automatically terminate your rights under
-this License (including any patent licenses granted under the third
-paragraph of section 11).
-
-  However, if you cease all violation of this License, then your
-license from a particular copyright holder is reinstated (a)
-provisionally, unless and until the copyright holder explicitly and
-finally terminates your license, and (b) permanently, if the copyright
-holder fails to notify you of the violation by some reasonable means
-prior to 60 days after the cessation.
-
-  Moreover, your license from a particular copyright holder is
-reinstated permanently if the copyright holder notifies you of the
-violation by some reasonable means, this is the first time you have
-received notice of violation of this License (for any work) from that
-copyright holder, and you cure the violation prior to 30 days after
-your receipt of the notice.
-
-  Termination of your rights under this section does not terminate the
-licenses of parties who have received copies or rights from you under
-this License.  If your rights have been terminated and not permanently
-reinstated, you do not qualify to receive new licenses for the same
-material under section 10.
-
-  9. Acceptance Not Required for Having Copies.
-
-  You are not required to accept this License in order to receive or
-run a copy of the Program.  Ancillary propagation of a covered work
-occurring solely as a consequence of using peer-to-peer transmission
-to receive a copy likewise does not require acceptance.  However,
-nothing other than this License grants you permission to propagate or
-modify any covered work.  These actions infringe copyright if you do
-not accept this License.  Therefore, by modifying or propagating a
-covered work, you indicate your acceptance of this License to do so.
-
-  10. Automatic Licensing of Downstream Recipients.
-
-  Each time you convey a covered work, the recipient automatically
-receives a license from the original licensors, to run, modify and
-propagate that work, subject to this License.  You are not responsible
-for enforcing compliance by third parties with this License.
-
-  An "entity transaction" is a transaction transferring control of an
-organization, or substantially all assets of one, or subdividing an
-organization, or merging organizations.  If propagation of a covered
-work results from an entity transaction, each party to that
-transaction who receives a copy of the work also receives whatever
-licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the
-Corresponding Source of the work from the predecessor in interest, if
-the predecessor has it or can get it with reasonable efforts.
-
-  You may not impose any further restrictions on the exercise of the
-rights granted or affirmed under this License.  For example, you may
-not impose a license fee, royalty, or other charge for exercise of
-rights granted under this License, and you may not initiate litigation
-(including a cross-claim or counterclaim in a lawsuit) alleging that
-any patent claim is infringed by making, using, selling, offering for
-sale, or importing the Program or any portion of it.
-
-  11. Patents.
-
-  A "contributor" is a copyright holder who authorizes use under this
-License of the Program or a work on which the Program is based.  The
-work thus licensed is called the contributor's "contributor version".
-
-  A contributor's "essential patent claims" are all patent claims
-owned or controlled by the contributor, whether already acquired or
-hereafter acquired, that would be infringed by some manner, permitted
-by this License, of making, using, or selling its contributor version,
-but do not include claims that would be infringed only as a
-consequence of further modification of the contributor version.  For
-purposes of this definition, "control" includes the right to grant
-patent sublicenses in a manner consistent with the requirements of
-this License.
-
-  Each contributor grants you a non-exclusive, worldwide, royalty-free
-patent license under the contributor's essential patent claims, to
-make, use, sell, offer for sale, import and otherwise run, modify and
-propagate the contents of its contributor version.
-
-  In the following three paragraphs, a "patent license" is any express
-agreement or commitment, however denominated, not to enforce a patent
-(such as an express permission to practice a patent or covenant not to
-sue for patent infringement).  To "grant" such a patent license to a
-party means to make such an agreement or commitment not to enforce a
-patent against the party.
-
-  If you convey a covered work, knowingly relying on a patent license,
-and the Corresponding Source of the work is not available for anyone
-to copy, free of charge and under the terms of this License, through a
-publicly available network server or other readily accessible means,
-then you must either (1) cause the Corresponding Source to be so
-available, or (2) arrange to deprive yourself of the benefit of the
-patent license for this particular work, or (3) arrange, in a manner
-consistent with the requirements of this License, to extend the patent
-license to downstream recipients.  "Knowingly relying" means you have
-actual knowledge that, but for the patent license, your conveying the
-covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that
-country that you have reason to believe are valid.
-
-  If, pursuant to or in connection with a single transaction or
-arrangement, you convey, or propagate by procuring conveyance of, a
-covered work, and grant a patent license to some of the parties
-receiving the covered work authorizing them to use, propagate, modify
-or convey a specific copy of the covered work, then the patent license
-you grant is automatically extended to all recipients of the covered
-work and works based on it.
-
-  A patent license is "discriminatory" if it does not include within
-the scope of its coverage, prohibits the exercise of, or is
-conditioned on the non-exercise of one or more of the rights that are
-specifically granted under this License.  You may not convey a covered
-work if you are a party to an arrangement with a third party that is
-in the business of distributing software, under which you make payment
-to the third party based on the extent of your activity of conveying
-the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory
-patent license (a) in connection with copies of the covered work
-conveyed by you (or copies made from those copies), or (b) primarily
-for and in connection with specific products or compilations that
-contain the covered work, unless you entered into that arrangement,
-or that patent license was granted, prior to 28 March 2007.
-
-  Nothing in this License shall be construed as excluding or limiting
-any implied license or other defenses to infringement that may
-otherwise be available to you under applicable patent law.
-
-  12. No Surrender of Others' Freedom.
-
-  If conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot convey a
-covered work so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you may
-not convey it at all.  For example, if you agree to terms that obligate you
-to collect a royalty for further conveying from those to whom you convey
-the Program, the only way you could satisfy both those terms and this
-License would be to refrain entirely from conveying the Program.
-
-  13. Remote Network Interaction; Use with the GNU General Public License.
-
-  Notwithstanding any other provision of this License, if you modify the
-Program, your modified version must prominently offer all users
-interacting with it remotely through a computer network (if your version
-supports such interaction) an opportunity to receive the Corresponding
-Source of your version by providing access to the Corresponding Source
-from a network server at no charge, through some standard or customary
-means of facilitating copying of software.  This Corresponding Source
-shall include the Corresponding Source for any work covered by version 3
-of the GNU General Public License that is incorporated pursuant to the
-following paragraph.
-
-  Notwithstanding any other provision of this License, you have
-permission to link or combine any covered work with a work licensed
-under version 3 of the GNU General Public License into a single
-combined work, and to convey the resulting work.  The terms of this
-License will continue to apply to the part which is the covered work,
-but the work with which it is combined will remain governed by version
-3 of the GNU General Public License.
-
-  14. Revised Versions of this License.
-
-  The Free Software Foundation may publish revised and/or new versions of
-the GNU Affero General Public License from time to time.  Such new versions
-will be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-  Each version is given a distinguishing version number.  If the
-Program specifies that a certain numbered version of the GNU Affero General
-Public License "or any later version" applies to it, you have the
-option of following the terms and conditions either of that numbered
-version or of any later version published by the Free Software
-Foundation.  If the Program does not specify a version number of the
-GNU Affero General Public License, you may choose any version ever published
-by the Free Software Foundation.
-
-  If the Program specifies that a proxy can decide which future
-versions of the GNU Affero General Public License can be used, that proxy's
-public statement of acceptance of a version permanently authorizes you
-to choose that version for the Program.
-
-  Later license versions may give you additional or different
-permissions.  However, no additional obligations are imposed on any
-author or copyright holder as a result of your choosing to follow a
-later version.
-
-  15. Disclaimer of Warranty.
-
-  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
-  16. Limitation of Liability.
-
-  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.
-
-  17. Interpretation of Sections 15 and 16.
-
-  If the disclaimer of warranty and limitation of liability provided
-above cannot be given local legal effect according to their terms,
-reviewing courts shall apply local law that most closely approximates
-an absolute waiver of all civil liability in connection with the
-Program, unless a warranty or assumption of liability accompanies a
-copy of the Program in return for a fee.
-
-                     END OF TERMS AND CONDITIONS
-
-            How to Apply These Terms to Your New Programs
-
-  If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
-  To do so, attach the following notices to the program.  It is safest
-to attach them to the start of each source file to most effectively
-state the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-    <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
-
-    This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Affero General Public License as published by
-    the Free Software Foundation, either version 3 of the License, or
-    (at your option) any later version.
-
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU Affero General Public License for more details.
-
-    You should have received a copy of the GNU Affero General Public License
-    along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-Also add information on how to contact you by electronic and paper mail.
-
-  If your software can interact with users remotely through a computer
-network, you should also make sure that it provides a way for users to
-get its source.  For example, if your program is a web application, its
-interface could display a "Source" link that leads users to an archive
-of the code.  There are many ways you could offer source, and different
-solutions will be better for different programs; see section 13 for the
-specific requirements.
-
-  You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU AGPL, see
-<https://www.gnu.org/licenses/>.
+MIT License
+
+Copyright (c) 2026 Prompt Security, SentinelOne
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

MIGRATION-SIGNED-FEED.md

@@ -1,30 +1,26 @@
-# Migration Record: Unsigned Feed → Signed Feed (Completed)
+# Migration Plan: Unsigned Feed → Signed Feed
 
-## 1) Objective and Status
+## 1) Objective
 
-Document how ClawSec advisory distribution moved from unsigned `feed.json` delivery to detached-signature verification, with compatibility preserved for legacy clients.
+Move ClawSec advisory distribution from unsigned `feed.json` delivery to detached-signature verification with minimal disruption.
 
-Current status on `main`:
-- Signed feed publishing is active in advisory workflows and deploy workflow.
-- Suite and NanoClaw consumers default to signed feed endpoints.
-- Unsigned behavior exists only as explicit compatibility bypass (`CLAWSEC_ALLOW_UNSIGNED_FEED=1`).
+This plan is written against the current repository behavior:
+- feed is produced by `poll-nvd-cves.yml` and `community-advisory.yml`
+- feed is published by `deploy-pages.yml`
+- suite consumers currently load unsigned JSON from remote/local fallback paths
 
-## 2) Baseline (today, post-migration)
+## 2) Baseline (today)
 
 Current feed paths in active use:
 - Source of truth: `advisories/feed.json`
-- Source signature: `advisories/feed.json.sig`
 - Skill copy: `skills/clawsec-feed/advisories/feed.json`
-- Skill copy signature: `skills/clawsec-feed/advisories/feed.json.sig`
 - Pages copy: `public/advisories/feed.json`
-- Pages signature: `public/advisories/feed.json.sig`
-- Latest mirror copy: `public/releases/latest/download/advisories/feed.json` (+ `.sig`)
+- Latest mirror copy: `public/releases/latest/download/advisories/feed.json`
 
 Current consumer defaults:
 - `skills/clawsec-suite/hooks/clawsec-advisory-guardian/handler.ts`
 - `skills/clawsec-suite/scripts/guarded_skill_install.mjs`
-- `skills/clawsec-nanoclaw/lib/advisories.ts`
-- default URL: `https://clawsec.prompt.security/advisories/feed.json`
+- default URL: `https://raw.githubusercontent.com/prompt-security/clawsec/main/advisories/feed.json`
 
 ## 3) Migration principles
 
@@ -33,21 +29,21 @@ Current consumer defaults:
 - **Measured rollout**: enforce verification after telemetry confirms stable signed publishing.
 - **Fast rollback**: preserve a path back to unsigned behavior while root cause is investigated.
 
-## 4) Phased timeline (historical)
+## 4) Phased timeline
 
-### Phase 0 — Preparation (Completed)
+### Phase 0 — Preparation (Week 0)
 
 Deliverables:
 - signing keys generated and fingerprints recorded
 - GitHub secrets created
 - public key(s) added in repo
-- runbooks approved (`security-signing-runbook.md`, this file)
+- runbooks approved (`SECURITY-SIGNING.md`, this file)
 
 Exit criteria:
 - key fingerprints verified by reviewer
 - protected branch/workflow controls enabled
 
-### Phase 1 — CI signing enabled, no client enforcement (Completed)
+### Phase 1 — CI signing enabled, no client enforcement (Week 1)
 
 Implement:
 - add feed signing step/workflow to produce `advisories/feed.json.sig`
@@ -62,7 +58,7 @@ Exit criteria:
 - signatures generated successfully for all feed update paths
 - deploy artifacts contain both payload and signature companions
 
-### Phase 2 — Consumer dual-read/dual-verify support (Completed)
+### Phase 2 — Consumer dual-read/dual-verify support (Week 2)
 
 Implement in consumers:
 - read `feed.json` and `feed.json.sig`
@@ -78,7 +74,7 @@ Exit criteria:
 - verification logic released and tested
 - no false-positive verification failures in soak period
 
-### Phase 3 — Enforcement (Completed)
+### Phase 3 — Enforcement (Week 3)
 
 Actions:
 - disable temporary unsigned fallback behavior in default paths
@@ -89,7 +85,7 @@ Exit criteria:
 - all production clients verify signatures by default
 - no unsigned feed dependency in standard installation flow
 
-### Phase 4 — Stabilization (Ongoing)
+### Phase 4 — Stabilization (Week 4)
 
 Actions:
 - run first key rotation tabletop drill
@@ -169,12 +165,3 @@ Go only if all are true:
 - consumer verification path tested for remote + local fallback
 - rollback owner is assigned and reachable
 - key rotation procedure has been dry-run at least once
-
-## Source References
-- .github/workflows/poll-nvd-cves.yml
-- .github/workflows/community-advisory.yml
-- .github/workflows/deploy-pages.yml
-- skills/clawsec-suite/hooks/clawsec-advisory-guardian/handler.ts
-- skills/clawsec-suite/scripts/guarded_skill_install.mjs
-- advisories/feed.json
-- wiki/security-signing-runbook.md

README.de.md

@@ -1,434 +0,0 @@
-<!-- AUTO-GENERATED TRANSLATION SCAFFOLD (de)
-Source: README.md
-Review status: draft
--->
-
-# Deutsch Translation Scaffold
-
-This file is currently a draft scaffold. Use README.md as the canonical source.
-
-<h1 align="center">
-<img src="/img/prompt-icon.svg" alt="prompt-icon" breit="40">
-ClawSec: Security Skill Suite für KI-Agenten
-<img src="/img/prompt-icon.svg" alt="prompt-icon" breit="40">
-</h1>
-
-<div align="center">
-
-Sichern Sie Ihre OpenClaw, NanoClaw und Hermes Agents mit einer kompletten Sicherheits-Fähigkeits-Suite
-
-<h4>Brought to you von <a href="https://prompt.security">Prompt Security</a>, the Platform of AI Security</h4>
-
-</div>
-
-<div align="center">
-
-![Prompt Security Logo](./img/Black+Color.png)
-<img src="/public/img/mascot.png" alt="clawsec mascot" breit="200" />
-
-</div>
-<div align="center">
-
-🌐 **Live at: [https://clawsec.prompt.security](https://clawsec.prompt.security)[https://prompt.security/clawsec](https://prompt.security/clawsec)**
-
-[![CI](https://github.com/prompt-security/clawsec/actions/workflows/ci.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/ci.yml)
-[![Deploy Pages](https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml)
-[![Poll NVD CVEs](https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml)
-
-
-</div>
-
---
-
-Übersetzungen
-
-- Español: [README.es.md](README.es.md)
-- 한국어: [README.ko.md](README.ko.md)
-
-Was ist ClawSec?
-
-ClawSec ist eine ** umfassende Sicherheits-Fähigkeits-Suite für AI-Agent-Plattformen*. Es bietet eine einheitliche Sicherheitsüberwachung, Integritätsprüfung und Bedrohung Intelligenz-Schutz der kognitiven Architektur Ihres Agenten gegen schnelle Injektion, Drift und schädliche Anweisungen.
-
-### Unterstützte Plattformen
-
-- **OpenClaw** (MoltBot, Clawdbot und Klone) - Komplette Suite mit Skill-Installer, Dateiintegritätsschutz und Sicherheitsaudits
-- **NanoKlaue** - Gebindet App-Bot-Sicherheit mit MCP-Tools für die Überwachung, Unterschriftsprüfung und Dateiintegrität
-- **Hermes** - Hermes-native Sicherheitskompetenzen für eine unterzeichnete Beratungs-Feed-Verifikation, beratungssichere Verifikation, deterministische Attestations-Generierung, fehlgeschlossene Verifikation und grundlegende Drifterkennung
-- **Picoclaw** - Leichte AI-Gateway-Sicherheitsüberprüfungen mit Beratendem Bewusstsein, config Drift-Erkennung, Release-artifact-Verifikation und einem optionalen separaten Selbst-Pen-Testpaket
-
-### Skill Feature Matrix
-
-| Skill name | unterstützte Plattform| Sicherheits-Feed-Verifikation- config Drift | Agent Self Pen-Tests- Supply-Chain-Verifikation |
-...
-| claw-release | OpenClaw | Nein | Nein | Nein | Nein | Ja |
-| clawsec-clawhub-checker | OpenClaw + clawsec-suite Integration | Nein | Nein | Nein | Ja |
-| clawsec-feed | OpenClaw | Ja | Nein | Nein | Ja |
-Ja | Ja | Ja | Ja | Ja | Ja |
-| clawsec-scanner | OpenClaw | Ja | Nein | Ja | Ja | Ja |
-| clawsec-suite | OpenClaw | Ja | Ja | Nein | Ja |
-| Clawtributor | OpenClaw | Ja | Nein | Nein
-| hermes-attestation-guardian | Hermes | Ja (signierte beratende Feed-Verifikation) | Ja | Nein | Limited (nur Vorabbeleuchtung; keine Artefaktsignatur/provenance install-Verifikation) |
-| Openclaw-audit-watchdog | OpenClaw | Nein | Nein | Ja | Nein
-| Picoclaw-security-guardian | Picoclaw | Ja | Ja | Nein
-| Picoclaw-self-pen-testing
-| Seelenhüter | OpenClaw | Nein | Nein | Nein
-
-### Core Caps
-
-- **📦 Suite Installer** - One-Command-Installation aller Sicherheitsfertigkeiten mit Integritätsprüfung
-- **🛡️ Datei-Integrity-Schutz* - Drift-Erkennung und Auto-Restore für kritische Agent-Dateien (SOUL.md, IDENTITY.md, etc.)
-- **📡 Live Security Advisories* - Automatisierte NVD CVE Umfragen und Community-Drohung Intelligenz
-- **🔍 Security Audits** - Self-Check-Skripte, um schnelle Injektionsmarker und Schwachstellen zu erkennen
-- **🔐 Prüfsummenverifikation** - SHA256 Prüfsummen für alle Fähigkeiten Artefakte
-- **Health Checks* - Automatisierte Updates und Integritätsprüfung für alle installierten Fähigkeiten
-
---
-
-Produktdemonstrationen
-
-Animierte Vorschauen unten sind GIFs (keine Audio). Klicken Sie auf jede Vorschau, um das volle MP4 mit Audio zu öffnen.
-
-### Demo installieren (`clawsec-suite`)
-
-[![Install demo animated preview](public/video/install-demo-preview.gif)(öffentlich/video/install-demo.mp4)
-
-Direkter Link: [install-demo.mp4](public/video/install-demo.mp4)
-
-### Drift Detection Demo (`soul-guardian`)
-
-[![Drift detection animated preview](public/video/soul-guardian-demo-preview.gif)(öffentlich/video/soul-guardian-demo.mp4)
-
-Direkter Link: [soul-guardian-demo.mp4](public/video/soul-guardian-demo.mp4)
-
---
-
-🚀 Schneller Start
-
-### For AI Agents
-
-```bash
-# Install the ClawSec security suite
-npx clawhub@latest install clawsec-suite
-```
-
-Nach der Installation kann die Suite:
-ANHANG Entdecken Sie installierbare Schutze aus dem veröffentlichten Kompetenzkatalog
-2. Verifizieren Sie die Freigabeintegrität mit unterzeichneten Prüfsummen
-3. Einrichtung von Beratungs- und hakenbasierten Schutzströmen
-4. Optionale geplante Überprüfungen hinzufügen
-
-Manual/source-first option:
-
-> Weiterlesen https://github.com/prompt-security/clawsec/releases/latest/download/SKILL.md und folgen den Installationsanweisungen.
-
-### For Humans
-
-Kopieren Sie diese Anleitung zu Ihrem KI-Agent:
-
-> Installieren Sie ClawSec mit `npx clawhub@latest install clawsec-suite`, füllen Sie dann die Setup-Schritte aus den generierten Anweisungen aus.
-
-### Shell and OS Notes
-
-ClawSec-Skripte werden aufgeteilt zwischen:
-- Cross-Plattform Node/Python-Tooling (`npm run build`, Haken/Setup `.mjs`_ `utils/*.py`_
-- POSIX Shell Workflows (`*.sh`, die meisten manuellen Installationsschnipsel)
-
-Für Linux/macOS (`bash`/`zsh`):
-- Verwenden Sie nicht zitiertes oder doppelt zitiertes Zuhause vars: `export INSTALL_ROOT="$HOME/.openclaw/skills"`
-- Do **not** Einquoten-Expandierbare Vars (zum Beispiel `'$HOME/.openclaw/skills'`)
-
-Für Windows (PowerShell):
-- Präferen Sie explizite Pfadaufbau:
-- Was?
-- Was?
-- POSIX `.sh` Skripte benötigen WSL oder Git Bash.
-
-Fehlerbehebung: Wenn Sie Verzeichnisse wie `~/.openclaw/workspace/$HOME/...` sehen, wurde eine Heimvariable buchstäblich übergeben. Re-run mit einem absoluten Pfad oder einem nicht zitierten Heimausdruck.
-
---
-
-Plattform & Suite Dokumentation
-
-Detaillierte Plattform und Suiten docs live in den Wiki-Modulen:
-- NanoClaw: [wiki/modules/nanoclaw-integration.md](wiki/modules/nanoclaw-integration.md)
-- Hermes: [wiki/modules/hermes-attestation-guardian.md](wiki/modules/hermes-attestation-guardian.md)
-- Picoclaw: [wiki/modules/picoclaw-security-guardian.md](wiki/modules/picoclaw-security-guardian.md)
-- Picoclaw Selbstprüfung: [wiki/modules/picoclaw-self-pen-testing.md](wiki/modules/picoclaw-self-pen-testing.md)
-- ClawSec Suite (OpenClaw): [wiki/modules/clawsec-suite.md](wiki/modules/clawsec-suite.md)
-- CI/CD-Pipelines: [wiki/modules/automation-release.md](wiki/modules/automation-release.md)
-
-Schnelle Installation von Links:
-- NanoClaw installiert: [skills/clawsec-nanoclaw/INSTALL.md](skills/clawsec-nanoclaw/INSTALL.md)
-- Hermes Geschick Paket: `skills/hermes-attestation-guardian/`
-- Picoclaw Schutzpaket: `skills/picoclaw-security-guardian/`
-- Picoclaw Selbstprüfungspaket: `skills/picoclaw-self-pen-testing/`
-- Suite-Paket: `skills/clawsec-suite/`
-
---
-
-📡 Sicherheitsberatung Fütterung
-
-ClawSec unterhält einen kontinuierlich aktualisierten Sicherheitsberatungsfeed, der automatisch aus der NIST National Vulnerability Database (NVD) besiedelt wird.
-
-### Feed URL
-
-```bash
-# Fetch latest advisories
-curl -s https://clawsec.prompt.security/advisories/feed.json | jq '.advisories[] | select(.severity == "critical" or .severity == "high")'
-```
-
-Kanonischer Endpunkt: `https://clawsec.prompt.security/advisories/feed.json`
-Kompatibilitätsspiegel (Legalacy): `https://clawsec.prompt.security/releases/latest/download/feed.json`
-
-### Überwachte Keywords
-
-Die Feed-Quoten CVEs bezogen auf:
-**OpenClaw Platform**: `OpenClaw`, `clawdbot`__, `Moltbot`
-**NanoClaw Platform**: `NanoClaw`____________________________________________________
-- **Picoclaw Platform*: `Picoclaw`, `picoclaw`, leichte AI Gateways, MCP Gateway Belichtung
-- Prompt Injektionsmuster
-- Sicherheitslücken von Agenten
-
-### Exploitability Context
-
-ClawSec bereichert CVE-Advisories mit **-Exploitability-Kontext**, um Agenten dabei zu helfen, das reale Risiko über die rohen CVSS-Score hinaus zu bewerten. Neu analysierte Berater können:
-
-- **Exploit Evidence**: Ob öffentliche Ausbeutungen in der Wildnis existieren
-- **Beantwortungsstatus**: Wenn Exploits in gemeinsame Angriffsrahmen integriert werden
-- **Anforderungen**: Voraussetzungen für eine erfolgreiche Nutzung (Netzwerkzugriff, Authentifizierung, Benutzerinteraktion)
-- **Risikobewertung**: Kontextualisiertes Risikoniveau, das technische Schwere mit Ausbeutbarkeit kombiniert
-
-Diese Funktion hilft Agenten, Schwachstellen zu priorisieren, die unmittelbare Bedrohungen gegenüber theoretischen Risiken darstellen und intelligentere Sicherheitsentscheidungen ermöglichen.
-
-### Advisory Schema
-
-**NVD CVE Beratung:**
-```json
-{
-  "id": "CVE-2026-XXXXX",
-  "severity": "critical|high|medium|low",
-  "type": "vulnerable_skill",
-  "platforms": ["openclaw", "nanoclaw"],
-  "title": "Short description",
-  "description": "Full CVE description from NVD",
-  "published": "2026-02-01T00:00:00Z",
-  "cvss_score": 8.8,
-  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-XXXXX",
-  "exploitability_score": "high|medium|low|unknown",
-  "exploitability_rationale": "Why this CVE is or is not likely exploitable in agent deployments",
-  "references": ["..."],
-  "action": "Recommended remediation"
-}
-```
-
-**Gemeinschaftsbeirat:**
-```json
-{
-  "id": "CLAW-2026-0042",
-  "severity": "high",
-  "type": "prompt_injection|vulnerable_skill|tampering_attempt",
-  "platforms": ["nanoclaw"],
-  "title": "Short description",
-  "description": "Detailed description from issue",
-  "published": "2026-02-01T00:00:00Z",
-  "affected": ["skill-name@1.0.0"],
-  "source": "Community Report",
-  "github_issue_url": "https://github.com/.../issues/42",
-  "action": "Recommended remediation"
-}
-```
-
-**Platformwerte:**
-- `"openclaw"` - OpenClaw/Clawdbot/Molt Nur
-- `"nanoclaw"` - NanoClaw nur
-- Nur Hermes
-- Nur Picoclaw
-- `["openclaw", "nanoclaw", "hermes", "picoclaw"]` - Alle Kernplattformen
-- (leer/missing) - Alle Plattformen (backward kompatibel)
-
---
-
-🔄 CI/CD Pipelines
-
-CI/CD Pipelinedetails wurden auf die Wiki-Modulseite verschoben:
-- Was?
-
-Ähnliche Arbeitspunkte:
-- Was?
-- Was?
-
---
-
-🛠️ Offline Tools
-
-ClawSec umfasst Python utilities für lokale Fähigkeiten Entwicklung und Validierung.
-
-### Skill Validator
-
-Validiert einen Geschicksordner gegen das erforderliche Schema:
-
-```bash
-python utils/validate_skill.py skills/clawsec-feed
-```
-
-Kontrollen:
-- `skill.json` existiert und ist gültig JSON
-- Erforderliche Felder vorhanden (Name, Version, Beschreibung, Autor, Lizenz)
-- SBOM-Dateien existieren und sind lesbar
-- OpenClaw Metadaten sind richtig strukturiert
-
-### Skill Checksums Generator
-
-Erzeugt `checksums.json` mit SHA256 Hashes für ein Geschick:
-
-```bash
-python utils/package_skill.py skills/clawsec-feed ./dist
-```
-
-Ausgänge:
-- `checksums.json` - SHA256 hathes zur Überprüfung
-
---
-
-Lokale Entwicklung
-
-### Voraussetzungen
-
-- Node.js 20+
-- Python 3.10+ (für Offline-Tools)
-- npm
-
-### Setup
-
-```bash
-# Install dependencies
-npm install
-
-# Start development server
-npm run dev
-```
-
-### Lokale Daten ausfüllen
-
-```bash
-# Populate skills catalog from local skills/ directory
-./scripts/populate-local-skills.sh
-
-# Populate advisory feed with real NVD CVE data
-./scripts/populate-local-feed.sh --days 120
-
-# Generate wiki llms exports from wiki/ (for local preview)
-./scripts/populate-local-wiki.sh
-
-# Direct generator entrypoint (used by predev/prebuild)
-npm run gen:wiki-llms
-```
-
-Anmerkungen:
-- `npm run dev` und `npm run build` regenerieren automatisch wiki `llms.txt` Exporte (`predev`_`prebuild` Haken).
-- `public/wiki/` wird ausgegeben (lokal + CI) und ist absichtlich gitignored.
-
-### Build
-
-```bash
-npm run build
-```
-
---
-
-Projektstruktur
-
-```
-├── advisories/
-│   ├── feed.json                    # Main advisory feed
-│   ├── feed.json.sig                # Detached signature for feed.json
-│   └── feed-signing-public.pem      # Public key for feed verification
-├── components/                      # React components
-├── pages/                           # Route/page components
-├── wiki/                            # Source-of-truth docs (synced to GitHub Wiki)
-├── scripts/
-│   ├── generate-wiki-llms.mjs       # wiki/*.md -> public/wiki/**/llms.txt
-│   ├── populate-local-feed.sh       # Local CVE feed populator
-│   ├── populate-local-skills.sh     # Local skills catalog populator
-│   ├── populate-local-wiki.sh       # Local wiki llms export populator
-│   ├── prepare-to-push.sh           # Local CI-style quality gate
-│   ├── validate-release-links.sh    # Release link checks
-│   └── release-skill.sh             # Manual skill release helper
-├── skills/
-│   ├── claw-release/                # 🚀 Release automation workflow skill
-│   ├── clawsec-suite/               # 📦 Suite installer (skill-of-skills)
-│   ├── clawsec-feed/                # 📡 Advisory feed skill
-│   ├── clawsec-scanner/             # 🔍 Vulnerability scanner (deps + SAST + OpenClaw DAST)
-│   ├── clawsec-nanoclaw/            # 📱 NanoClaw platform security suite
-│   ├── clawsec-clawhub-checker/     # 🧪 ClawHub reputation checks
-│   ├── clawtributor/                # 🤝 Community reporting skill
-│   ├── hermes-attestation-guardian/ # 🛡️ Hermes attestation + drift verification
-│   ├── openclaw-audit-watchdog/     # 🔭 Automated audit skill
-│   ├── picoclaw-security-guardian/  # 🦐 Picoclaw posture/advisory/drift/supply-chain checks
-│   ├── picoclaw-self-pen-testing/   # 🧪 Picoclaw self-pen-testing checks (separate package)
-│   └── soul-guardian/               # 👻 File integrity skill
-├── utils/
-│   ├── package_skill.py             # Skill packager utility
-│   └── validate_skill.py            # Skill validator utility
-├── .github/workflows/
-│   ├── ci.yml                       # Cross-platform lint/type/build + tests
-│   ├── pages-verify.yml             # PR-only pages build/signing verification
-│   ├── poll-nvd-cves.yml            # CVE polling pipeline
-│   ├── community-advisory.yml       # Approved issue -> advisory PR
-│   ├── skill-release.yml            # Skill release/signing pipeline
-│   ├── deploy-pages.yml             # GitHub Pages deployment
-│   ├── wiki-sync.yml                # Sync repo wiki/ to GitHub Wiki
-│   ├── codeql.yml                   # CodeQL security analysis
-│   └── scorecard.yml                # OpenSSF Scorecard checks
-└── public/                          # Static assets + generated wiki exports
-```
-
---
-
-Beiträge
-
-Wir begrüßen Beiträge! Siehe [CONTRIBUTING.md](CONTRIBUTING.md) für Richtlinien.
-
-### Sicherheitsberater einfügen
-
-Haben Sie einen schnellen Injektionsvektor, bösartige Fähigkeiten oder Sicherheitslücke gefunden? Über GitHub Issues melden:
-
-ANHANG Öffne ein neues Problem mit der Vorlage **Security Incident Report***
-2. Füllen Sie die erforderlichen Felder aus (Stärke, Art, Beschreibung, Betroffene Fähigkeiten)
-3. Ein Betreuer überprüft und fügt das `advisory-approved` Label hinzu
-4. Die Beratung wird automatisch im Feed veröffentlicht als `CLAW-{YEAR}-{ISSUE#}`
-
-Siehe `CLAW-{YEAR}-{ISSUE#}` für detaillierte Richtlinien.
-
-### Neue Fähigkeiten hinzufügen
-
-ANHANG Erstellen Sie einen Kompetenzordner unter `skills/`
-2. Hinzufügen `skill.json` mit benötigten Metadaten und SBOM
-3. `SKILL.md` mit agentenlesbaren Anweisungen hinzufügen
-4. Gültig mit `python utils/validate_skill.py skills/your-skill`
-5. Eine PR zur Überprüfung einreichen
-
-📚 Dokumentation Quelle der Wahrheit
-
-Für alle Wiki-Inhalte bearbeiten Sie Dateien unter `wiki/` in diesem Repository. Das GitHub Wiki (`<repo>.wiki.git`) wird von `wiki/`_ durch `.github/workflows/wiki-sync.yml` synchronisiert, wenn `wiki/**`_ auf `main`__ wechselt.
-
-LLM-Exporte werden von `wiki/` in `public/wiki/`_ generiert:
-- `/wiki/llms.txt` ist der LLM-ready Export für `wiki/INDEX.md` (oder ein generierter Fallback-Index, wenn `INDEX.md` fehlt).
-- `/wiki/<page>/llms.txt` ist der LLM-ready Export für diese einzelne Wiki-Seite.
-
---
-
-📄 Lizenz
-
-- Quellcode: GNU AGPL v3.0 oder später - Siehe [LICENSE](LICENSE) für Details.
-- Schriften in `font/`: separat lizenziert - Siehe [`font/README.md`](font/README.md).
-
---
-
-<div align="center">
-
-**ClawSec** · Sicherheitsleistung, SentinelOne
-
-🦞 Härten Agentic Workflows, eine Fähigkeit zu einer Zeit.
-
-</div>

README.es.md

@@ -1,277 +0,0 @@
-■h1 align="center"
-■img src="./img/prompt-icon.svg" alt="prompt-icon" ancho="40"
-  ClawSec: Suite de habilidades de seguridad para agentes de IA
-■img src="./img/prompt-icon.svg" alt="prompt-icon" ancho="40"
-■/h1 título
-
-"Cierto"
-
-## Protege tus agentes OpenClaw, NanoClaw, Hermes y Picoclaw con una suite de seguridad completa
-
-<h4>Traído por <a href="https://prompt.security">Prompt Security</a>, la plataforma de seguridad para IA</h4>
-
-■/div titulada
-
-"Cierto"
-
-! [Prompt Security Logo](./img/Black+Color.png)
-■img src="./public/img/mascot.png" alt="clawsec mascot" ancho="200" /
-
-■/div titulada
-
-"Cierto"
-
-🌐 **En vivo en: [https://clawsec.prompt.security](https://clawsec.prompt.security) [https://prompt.security/clawsec](https://prompt.security/clawsec)**
-
-[![CI](https://github.com/prompt-security/clawsec/actions/workflows/ci.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/ci.yml)
-[![Deploy Pages](https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml)
-[![Poll NVD CVEs](https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml)
-
-■/div titulada
-
--...
-
-## 🌍 Traducciones
-
-- English (source of truth): [README.md](README.md)
-- Español: `README.es.md`
-
-## ✅ Estado de traducción (Fase 1)
-
-Esta traducción en español cubre el flujo principal de onboarding y operación.
-Para detalles de bajo nivel, schema completo y notas avanzadas de CI/CD, consulta el README en inglés.
-
-## 🦞 ¿Qué es ClawSec?
-
-ClawSec es una **suite completa de habilidades de seguridad para plataformas de agentes de IA**. Proporciona monitoreo de seguridad unificado, verificación de integridad e inteligencia de amenazas para proteger la arquitectura cognitiva del agente frente a inyección de prompts, deriva y/o instrucciones maliciosas.
-
-### Plataformas compatibles
-
-- **OpenClaw** (MoltBot, Clawdbot y clones): suite completa con instalador de habilidades, protección de integridad de archivos y auditorías de seguridad
-- **NanoClaw**: seguridad para bot de WhatsApp en contenedor, con herramientas MCP para monitoreo de advisories, verificación de firmas e integridad de archivos
-- **Hermes**: habilidades nativas de Hermes para verificación de feed firmado, verificación protegida con contexto de advisories, generación determinista de attestation, fail-closed verification y detección de drift de baseline
-- **Picoclaw**: chequeos livianos de postura de seguridad en gateway de IA, con awareness de advisories, detección de drift de configuración, verificación de artefactos de release y paquete opcional separado de self-pen-testing
-
-### Capacidades principales
-
-- **📦 Instalador de suite**: instalación de todas las habilidades de seguridad con un solo comando y verificación de integridad
-- **🛡️ Protección de integridad de archivos**: detección de drift y auto-restauración de archivos críticos del agente (`SOUL.md`, `IDENTITY.md`, etc.)
-- **📡 Advisories de seguridad en vivo**: polling automatizado de CVEs del NVD e inteligencia comunitaria
-- **🔍 Auditorías de seguridad**: scripts de auto-chequeo para detectar marcadores de prompt injection y vulnerabilidades
-- **🔐 Verificación por checksums**: hashes SHA256 para artefactos de habilidades
-- **Health checks**: actualizaciones y verificación de integridad automatizadas para habilidades instaladas
-
--...
-
-## 🚀 Inicio rápido
-
-### Para agentes de IA
-
-```bash
-# Instala la suite de seguridad de ClawSec
-npx clawhub@latest install clawsec-suite
-```
-
-Después de instalar, la suite puede:
-1. Descubrir protecciones instalables desde el catálogo de habilidades publicado
-2. Verificar la integridad de releases con checksums firmados
-3. Configurar monitoreo de advisories y flujos de protección basados en hooks
-4. Añadir chequeos programados opcionales
-
-Opción manual/source-first:
-
-> Lee https://github.com/prompt-security/clawsec/releases/latest/download/SKILL.md y sigue las instrucciones de instalación.
-
-### Para humanos
-
-Copia esta instrucción a tu agente:
-
-> Instala ClawSec con `npx clawhub@latest install clawsec-suite`, y luego completa los pasos de setup desde las instrucciones generadas.
-
-### Notas de shell y SO
-
-Los scripts de ClawSec se dividen entre:
-- Tooling cross-platform en Node/Python (`npm run build`, hooks/setup `.mjs`, `utils/*.py`)
-- Flujos POSIX shell (`*.sh`, la mayoría de snippets de instalación manual)
-
-Para Linux/macOS (`bash`/`zsh`):
-- Usa variables home sin comillas simples o con comillas dobles: `export INSTALL_ROOT="$HOME/.openclaw/skills"`
-- **No** uses comillas simples con variables expandibles (por ejemplo, evita `'$HOME/.openclaw/skills'`)
-
-Para Windows (PowerShell):
-- Prefiere construir rutas de forma explícita:
-- `$env:INSTALL_ROOT = Join-Path $HOME ".openclaw\\skills"`
-- `node "$env:INSTALL_ROOT\\clawsec-suite\\scripts\\setup_advisory_hook.mjs"`
-- Los scripts POSIX `.sh` requieren WSL o Git Bash.
-
-Si ves rutas tipo `~/.openclaw/workspace/$HOME/...`, una variable home se pasó de forma literal. Re-ejecuta con ruta absoluta o con expresión home expandible.
-
--...
-
-## 🧭 Documentación por plataforma y suite
-
-La documentación detallada vive en los módulos del wiki:
-- NanoClaw: [wiki/modules/nanoclaw-integration.md](wiki/modules/nanoclaw-integration.md)
-- Hermes: [wiki/modules/hermes-attestation-guardian.md](wiki/modules/hermes-attestation-guardian.md)
-- Picoclaw: [wiki/modules/picoclaw-security-guardian.md](wiki/modules/picoclaw-security-guardian.md)
-- Picoclaw auto-pen-testing: [wiki/modules/picoclaw-self-pen-testing.md](wiki/modules/picoclaw-self-pen-testing.md)
-- ClawSec Suite (OpenClaw): [wiki/modules/clawsec-suite.md](wiki/modules/clawsec-suite.md)
-- Pipelines CI/CD: [wiki/modules/automation-release.md](wiki/modules/automation-release.md)
-
-Instalación rápida:
-- NanoClaw: [skills/clawsec-nanoclaw/INSTALL.md](skills/clawsec-nanoclaw/INSTALL.md)
-- Hermes: `skills/hermes-attestation-guardian/`
-- Picoclaw guardian: `skills/picoclaw-security-guardian/`
-- Picoclaw self-pen-testing: `skills/picoclaw-self-pen-testing/`
-- Suite: `skills/clawsec-suite/`
-
--...
-
-## 📡 Feed de advisories de seguridad
-
-ClawSec mantiene un feed de advisories continuamente actualizado, poblado automáticamente desde la National Vulnerability Database (NVD) de NIST.
-
-### URL del feed
-
-```bash
-# Obtener advisories recientes
-curl -s https://clawsec.prompt.security/advisories/feed.json | jq '.advisories[] | select(.severity == "critical" or .severity == "high")'
-```
-
-Endpoint canónico: `https://clawsec.prompt.security/advisories/feed.json`  
-Mirror de compatibilidad (legacy): `https://clawsec.prompt.security/releases/latest/download/feed.json`
-
-### Palabras clave monitoreadas
-
-El feed consulta CVEs relacionados con:
-- **OpenClaw**: `OpenClaw`, `clawdbot`, `Moltbot`
-- **NanoClaw**: `NanoClaw`, `WhatsApp-bot`, `baileys`
-- **Picoclaw**: `Picoclaw`, gateways ligeros de IA, exposición de gateway MCP
-- Patrones de prompt injection
-- Vulnerabilidades de seguridad en agentes
-
-### Contexto de explotabilidad
-
-ClawSec enriquece advisories de CVE con **contexto de explotabilidad** para ayudar a evaluar riesgo real, más allá del score CVSS bruto.
-
-Puede incluir:
-- **Evidencia de exploit**: si hay exploits públicos activos
-- **Estado de weaponization**: si hay integración en frameworks comunes de ataque
-- **Requisitos de ataque**: prerequisitos para explotar (acceso de red, autenticación, interacción de usuario)
-- **Evaluación de riesgo**: nivel contextualizado que combina severidad técnica y explotabilidad
-
-Esto ayuda a priorizar vulnerabilidades de amenaza inmediata frente a riesgos teóricos.
-
--...
-
-## 🛠️ Desarrollo local
-
-### Prerrequisitos
-
-- Node.js 20+
-- Python 3.10+ (herramientas offline)
-- Npm
-
-#### Setup
-
-```bash
-# Instala dependencias
-npm install
-
-# Arranca servidor de desarrollo
-npm run dev
-```
-
-### Poblar datos locales
-
-```bash
-# Poblar catálogo de skills desde skills/
-./scripts/populate-local-skills.sh
-
-# Poblar advisory feed con CVEs reales del NVD
-./scripts/populate-local-feed.sh --days 120
-
-# Generar exportes llms desde wiki/ (preview local)
-./scripts/populate-local-wiki.sh
-
-# Entry point directo del generador (usado por predev/prebuild)
-npm run gen:wiki-llms
-```
-
-Notas:
-- `npm run dev` y `npm run build` regeneran automáticamente exportes `llms.txt` (`predev`/`prebuild`).
-- `public/wiki/` es salida generada (local + CI) y está gitignored intencionalmente.
-
-### Build
-
-```bash
-npm run build
-```
-
--...
-
-## 📁 Estructura del proyecto
-
-```text
-├── advisories/
-├── components/
-├── pages/
-├── wiki/
-├── scripts/
-├── skills/
-├── utils/
-├── .github/workflows/
-└── public/
-```
-
-Para la estructura detallada (scripts, workflows y paquetes de habilidades), consulta el README principal en inglés: [README.md](README.md).
-
--...
-
-## 🤝 Contribuir
-
-¡Contribuciones bienvenidas! Revisa [CONTRIBUTING.md](CONTRIBUTING.md).
-
-### Enviar advisories de seguridad
-
-¿Encontraste un vector de prompt injection, skill malicioso o vulnerabilidad? Repórtalo en GitHub Issues:
-
-1. Abre un issue nuevo con la plantilla **Security Incident Report**
-2. Completa campos requeridos (severidad, tipo, descripción, skills afectados)
-3. Un maintainer revisa y agrega `advisory-approved`
-4. El advisory se publica automáticamente en el feed como `CLAW-{YEAR}-{ISSUE#}`
-
-Guía detallada: [CONTRIBUTING.md#submitting-security-advisories](CONTRIBUTING.md#submitting-security-advisories)
-
-### Añadir nuevas skills
-
-1. Crea carpeta bajo `skills/`
-2. Agrega `skill.json` con metadata requerida y SBOM
-3. Agrega `SKILL.md` con instrucciones legibles por agente
-4. Valida con `python utils/validate_skill.py skills/your-skill`
-5. Envía PR para review
-
-## 📚 Fuente de verdad de la documentación
-
-Todo el contenido wiki se edita en `wiki/` dentro de este repo. El GitHub Wiki (`<repo>.wiki.git`) se sincroniza desde `wiki/` vía `.github/workflows/wiki-sync.yml` cuando cambia `wiki/**` en `main`.
-
-Los exportes para LLM se generan desde `wiki/` hacia `public/wiki/`:
-- `/wiki/llms.txt` exporta `wiki/INDEX.md` (o índice fallback generado si falta `INDEX.md`)
-- `/wiki/<page>/llms.txt` exporta la página wiki individual
-
--...
-
-## 📄 Licencia
-
-- Código fuente: GNU AGPL v3.0 o posterior — ver [LICENSE](LICENSE)
-- Fuentes en `font/`: licencia separada — ver [`font/README.md`](font/README.md)
-
--...
-
-"Cierto"
-
-**ClawSec** · Seguridad Prompt, SentinelOne
-
-🦞 Fortaleciendo flujos agentic, skill por skill.
-
-■/div titulada

README.fr.md

@@ -1,434 +0,0 @@
-<!-- AUTO-GENERATED TRANSLATION SCAFFOLD (fr)
-Source: README.md
-Review status: draft
--->
-
-# Français Translation Scaffold
-
-This file is currently a draft scaffold. Use README.md as the canonical source.
-
-<h1 align="center">
-<img src="/img/prompt-icon.svg" alt="prompt-icon" largeur="40">
-ClawSec: Suite de compétences en sécurité pour les agents d'IA
-<img src="/img/prompt-icon.svg" alt="prompt-icon" largeur="40">
-</h1>
-
-<div align="center">
-
-## Sécurisez vos agents OpenClaw, NanoClaw et Hermes avec une suite complète de compétences en sécurité
-
-<h4>Présenté par <a href="https://prompt.security">Prompt Security</a>, la plateforme pour la sécurité de l'IA</h4>
-
-</div>
-
-<div align="center">
-
-- Oui. [Prompt Security Logo](./img/Black+Color.png)
-<img src="/public/img/mascot.png" alt="clawsec mascotte" width="200" />
-
-</div>
-<div align="center">
-
-C'est-à-dire **Live at: [https://clawsec.prompt.security](https://clawsec.prompt.security) [https://prompt.security/clawsec](https://prompt.security/clawsec)**
-
-[![CI](https://github.com/prompt-security/clawsec/actions/workflows/ci.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/ci.yml)
-[![Deploy Pages](https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml)
-[![Poll NVD CVEs](https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml/badge.svg)](https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml)
-
-
-</div>
-
----
-
-Traductions
-
-- Español: [README.es.md](README.es.md)
-- 한국어: [README.ko.md](README.ko.md)
-
-Qu'est-ce que ClawSec ?
-
-ClawSec est une suite complète de compétences en sécurité pour les plateformes d'agents d'IA**. Il fournit une surveillance de sécurité unifiée, la vérification de l'intégrité et la protection de l'architecture cognitive de votre agent contre l'injection rapide, la dérive et les instructions malveillantes.
-
-Plateformes prises en charge
-
-- **OpenClaw** (MoltBot, Clawdbot et clones) - Suite complète avec installateur de compétences, protection de l'intégrité des fichiers et audits de sécurité
-- **NanoClaw** - Containerized Whats Sécurité des applications bot avec des outils MCP pour la surveillance consultative, la vérification des signatures et l'intégrité des fichiers
-- **Hermès** - Compétences en sécurité Hermès-native pour la vérification de l'alimentation, la vérification de l'information-conseil, la génération d'attestations déterministes, la vérification fermée et la détection de la dérive de base
-- **Picoclaw** - Contrôles de la posture de sécurité de la passerelle légère AI avec sensibilisation, détection de la dérive de config, vérification de l'artéfact de relâchement, et un ensemble d'auto-essais facultatifs
-
-### Matrix des compétences
-
-- Oui. Nom de la compétence Plate-forme prise en charge de la sécurité de la vérification de l'alimentation de config driving de l'agent testing de l'auto stylo de la chaîne d'approvisionnement de vérification d'installation de l'installation de l'agent
--- -- -- -- -- -- -- -- -- -- -- -- --
-Claw-release
-Clawsec-clawhub-checker
-Oui Non Oui Oui
-Oui Oui Oui Oui
-Oui Non Oui Oui
-Oui Oui Oui Oui
-Clawtributor OpenClaw OpenClaw OpenClaw OpenClaw OpenClaw
-Hermes-attestation-guardian.
-Openclaw-audit-watchdog
-Picoclaw-security-guardian.
-Picoclaw-auto-test de stylos
-Un gardien de l'âme OpenClaw OpenClaw OpenClaw OpenClaw
-
-Capacités de base
-
-- ** Installateur Suite** - Installation unique de toutes les compétences de sécurité avec vérification de l'intégrité
-- Oui. Protection de l'intégrité des fichiers** - Détection et récupération automatique des fichiers d'agents critiques (SOUL.md, IDENTITY.md, etc.)
-- * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
-- Oui. Audits de sécurité** - Auto-vérifier les scripts pour détecter les marqueurs d'injection et les vulnérabilités
-- Oui. Vérification des contrôles** - SHA256 somme de contrôle pour tous les artefacts de compétence
-- **Vérifications santé** - Mises à jour automatisées et vérification de l'intégrité pour toutes les compétences installées
-
----
-
-Démos de produits
-
-Les aperçus animés ci-dessous sont des GIF (pas d'audio). Cliquez sur n'importe quel aperçu pour ouvrir le MP4 complet avec audio.
-
-### Installer la démo (`clawsec-suite`)
-
-[![Install demo animated preview](public/video/install-demo-preview.gif)](public/video/install-demo.mp4)
-
-Lien direct: [install-demo.mp4](public/video/install-demo.mp4)
-
-### Démo de détection de la dérive (`soul-guardian`)
-
-[![Drift detection animated preview](public/video/soul-guardian-demo-preview.gif)](public/video/soul-guardian-demo.mp4)
-
-Lien direct: [soul-guardian-demo.mp4](public/video/soul-guardian-demo.mp4)
-
----
-
-Début rapide
-
-Pour les agents de l'IA
-
-```bash
-# Install the ClawSec security suite
-npx clawhub@latest install clawsec-suite
-```
-
-Après l'installation, la suite peut :
-1. Découvrez les protections installables à partir du catalogue de compétences publié
-2. Vérifier l'intégrité de la libération à l'aide de comptes de vérification signés
-3. Mettre en place une surveillance consultative et des flux de protection par crochet
-4. Ajouter des contrôles programmés facultatifs
-
-Manuel/source-première option:
-
-> Lire https://github.com/prompt-security/clawsec/releases/latest/download/SKILL.md et suivre les instructions d'installation.
-
-Pour les humains
-
-Copiez cette instruction à votre agent d'IA :
-
-> Installez ClawSec avec `npx clawhub@latest install clawsec-suite`, puis remplissez les étapes de configuration à partir des instructions générées.
-
-### Notes Shell et OS
-
-Les scripts ClawSec sont divisés entre :
-- Plateforme transversale Outillage Noeud/Python (`npm run build`, crochet/réglage `.mjs`, `utils/*.py`)
-- Workflows shell POSIX (`*.sh`, la plupart des snipets d'installation manuelle)
-
-Pour Linux/macOS (`bash`/`zsh`):
-- Utiliser des vars d'habitation sans ou double citations: `export INSTALL_ROOT="$HOME/.openclaw/skills"`
-- Ne pas **** vars extensibles à simple cote (par exemple, éviter `'$HOME/.openclaw/skills'`)
-
-Pour Windows (PowerShell):
-- Préférez la construction explicite du chemin :
-- `$env:INSTALL_ROOT = Join-Path $HOME ".openclaw\\skills"`
-- `node "$env:INSTALL_ROOT\\clawsec-suite\\scripts\\setup_advisory_hook.mjs"`
-- POSIX `.sh` nécessitent WSL ou Git Bash.
-
-Dépannage : si vous voyez des répertoires tels que `~/.openclaw/workspace/$HOME/...`, une variable d'accueil a été transmise littéralement. Re-exécuter en utilisant un chemin absolu ou une expression de la maison non citée.
-
----
-
-Documentation sur la plateforme et la suite
-
-Des documents détaillés sur la plateforme et la suite sont disponibles dans les modules wiki :
-- NanoClaw: [wiki/modules/nanoclaw-integration.md](wiki/modules/nanoclaw-integration.md)
-- Hermès: [wiki/modules/hermes-attestation-guardian.md](wiki/modules/hermes-attestation-guardian.md)
-- Picoclaw: [wiki/modules/picoclaw-security-guardian.md](wiki/modules/picoclaw-security-guardian.md)
-- Picoclaw auto-test : [wiki/modules/picoclaw-self-pen-testing.md](wiki/modules/picoclaw-self-pen-testing.md)
-- ClawSec Suite (OpenClaw): [wiki/modules/clawsec-suite.md](wiki/modules/clawsec-suite.md)
-- pipelines CI/CD: [wiki/modules/automation-release.md](wiki/modules/automation-release.md)
-
-Liens d'installation rapide :
-- Installation de NanoClaw : [skills/clawsec-nanoclaw/INSTALL.md](skills/clawsec-nanoclaw/INSTALL.md)
-- Pack de compétences Hermes: `skills/hermes-attestation-guardian/`
-- Paquet de protection Picoclaw: `skills/picoclaw-security-guardian/`
-- Paquet Picoclaw auto-test: `skills/picoclaw-self-pen-testing/`
-- Paquet Suite: `skills/clawsec-suite/`
-
----
-
-No # # # Avis de sécurité
-
-ClawSec tient à jour en permanence un avis de sécurité, alimenté automatiquement par la base de données nationale sur la vulnérabilité (NVD) du NIST.
-
-URL du flux
-
-```bash
-# Fetch latest advisories
-curl -s https://clawsec.prompt.security/advisories/feed.json | jq '.advisories[] | select(.severity == "critical" or .severity == "high")'
-```
-
-Critère canonique: `https://clawsec.prompt.security/advisories/feed.json`
-Miroir de compatibilité (légère): `https://clawsec.prompt.security/releases/latest/download/feed.json`
-
-Mots-clés surveillés
-
-Les sondages sur les aliments du bétail ont porté sur :
-- ** Plateforme OpenClaw** : `OpenClaw`, `clawdbot`, `Moltbot`
-- **NanoClaw Platform**: `NanoClaw`, `WhatsApp-bot`, `baileys`
-- **Picoclaw Platform**: `Picoclaw`, `picoclaw`, passerelles AI légères, exposition aux passerelles MCP
-- Modèles d'injection rapides
-- Vulnérabilités de sécurité des agents
-
-Contexte d'exploitation
-
-ClawSec enrichit les avis CVE avec **contexte d'exploitation** pour aider les agents à évaluer le risque réel au-delà des scores CVSS bruts. Les avis nouvellement analysés peuvent comprendre :
-
-- **Exploiter des preuves**: si des exploits publics existent dans la nature
-- ** État des armes** : Si les exploits sont intégrés dans des cadres d'attaque communs
-- **Exigences d'adaptation**: Prérequis pour une exploitation réussie (accès au réseau, authentification, interaction utilisateur)
-- **Évaluation des risques**: Niveau de risque contextuel combinant gravité technique et exploitabilité
-
-Cette fonctionnalité aide les agents à prioriser les vulnérabilités qui posent des menaces immédiates par rapport aux risques théoriques, permettant ainsi des décisions de sécurité plus intelligentes.
-
-Schéma consultatif
-
-** NVD CVE Conseil :**
-```json
-{
-  "id": "CVE-2026-XXXXX",
-  "severity": "critical|high|medium|low",
-  "type": "vulnerable_skill",
-  "platforms": ["openclaw", "nanoclaw"],
-  "title": "Short description",
-  "description": "Full CVE description from NVD",
-  "published": "2026-02-01T00:00:00Z",
-  "cvss_score": 8.8,
-  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-XXXXX",
-  "exploitability_score": "high|medium|low|unknown",
-  "exploitability_rationale": "Why this CVE is or is not likely exploitable in agent deployments",
-  "references": ["..."],
-  "action": "Recommended remediation"
-}
-```
-
-**Conseil communautaire:**
-```json
-{
-  "id": "CLAW-2026-0042",
-  "severity": "high",
-  "type": "prompt_injection|vulnerable_skill|tampering_attempt",
-  "platforms": ["nanoclaw"],
-  "title": "Short description",
-  "description": "Detailed description from issue",
-  "published": "2026-02-01T00:00:00Z",
-  "affected": ["skill-name@1.0.0"],
-  "source": "Community Report",
-  "github_issue_url": "https://github.com/.../issues/42",
-  "action": "Recommended remediation"
-}
-```
-
-**Valeurs de la plateforme:**
-- `"openclaw"` - OpenClaw/Clawdbot/Molt Bot seulement
-- `"nanoclaw"` - NanoClaw seulement
-- `"hermes"` - Hermès seulement
-- `"picoclaw"` - Picoclaw seulement
-- `["openclaw", "nanoclaw", "hermes", "picoclaw"]` - Toutes les plateformes centrales
-- (vide/manque) - Toutes les plates-formes (compatible avec l'arrière)
-
----
-
-Lignes de pipelines CI/CD
-
-Les détails du pipeline CI/CD ont été déplacés vers la page du module wiki :
-- [wiki/modules/automation-release.md](wiki/modules/automation-release.md)
-
-Opérations connexes docs:
-- [wiki/security-signing-runbook.md](wiki/security-signing-runbook.md)
-- [wiki/migration-signed-feed.md](wiki/migration-signed-feed.md)
-
----
-
-Outils hors ligne
-
-ClawSec comprend Utilitaires Python pour le développement et la validation des compétences locales.
-
-### Validateur de compétences
-
-Valide un dossier de compétences en fonction du schéma requis :
-
-```bash
-python utils/validate_skill.py skills/clawsec-feed
-```
-
-Contrôles :
-- `skill.json` existe et est valide JSON
-- Champs obligatoires présents (nom, version, description, auteur, licence)
-- Les fichiers SBOM existent et sont lisibles
-- Les métadonnées OpenClaw sont bien structurées
-
-Générateur de contrôles de compétences
-
-Génére `checksums.json` avec SHA256 haches pour une compétence:
-
-```bash
-python utils/package_skill.py skills/clawsec-feed ./dist
-```
-
-Produits :
-- `checksums.json` - SHA256 haches pour vérification
-
----
-
-Développement local
-
-Préalables
-
-- Node.js 20+
-- Python 3.10+ (pour les outils hors ligne)
-- npm
-
-Configuration
-
-```bash
-# Install dependencies
-npm install
-
-# Start development server
-npm run dev
-```
-
-- Oui. Populer des données locales
-
-```bash
-# Populate skills catalog from local skills/ directory
-./scripts/populate-local-skills.sh
-
-# Populate advisory feed with real NVD CVE data
-./scripts/populate-local-feed.sh --days 120
-
-# Generate wiki llms exports from wiki/ (for local preview)
-./scripts/populate-local-wiki.sh
-
-# Direct generator entrypoint (used by predev/prebuild)
-npm run gen:wiki-llms
-```
-
-Remarques:
-- `npm run dev` et `npm run build` régénèrent automatiquement les exportations de wikis `llms.txt` (Hooks `predev`/`prebuild`).
-- `public/wiki/` est généré en sortie (locale + CI) et est intentionnellement gitagnolé.
-
-Construire
-
-```bash
-npm run build
-```
-
----
-
-Structure du projet
-
-```
-├── advisories/
-│   ├── feed.json                    # Main advisory feed
-│   ├── feed.json.sig                # Detached signature for feed.json
-│   └── feed-signing-public.pem      # Public key for feed verification
-├── components/                      # React components
-├── pages/                           # Route/page components
-├── wiki/                            # Source-of-truth docs (synced to GitHub Wiki)
-├── scripts/
-│   ├── generate-wiki-llms.mjs       # wiki/*.md -> public/wiki/**/llms.txt
-│   ├── populate-local-feed.sh       # Local CVE feed populator
-│   ├── populate-local-skills.sh     # Local skills catalog populator
-│   ├── populate-local-wiki.sh       # Local wiki llms export populator
-│   ├── prepare-to-push.sh           # Local CI-style quality gate
-│   ├── validate-release-links.sh    # Release link checks
-│   └── release-skill.sh             # Manual skill release helper
-├── skills/
-│   ├── claw-release/                # 🚀 Release automation workflow skill
-│   ├── clawsec-suite/               # 📦 Suite installer (skill-of-skills)
-│   ├── clawsec-feed/                # 📡 Advisory feed skill
-│   ├── clawsec-scanner/             # 🔍 Vulnerability scanner (deps + SAST + OpenClaw DAST)
-│   ├── clawsec-nanoclaw/            # 📱 NanoClaw platform security suite
-│   ├── clawsec-clawhub-checker/     # 🧪 ClawHub reputation checks
-│   ├── clawtributor/                # 🤝 Community reporting skill
-│   ├── hermes-attestation-guardian/ # 🛡️ Hermes attestation + drift verification
-│   ├── openclaw-audit-watchdog/     # 🔭 Automated audit skill
-│   ├── picoclaw-security-guardian/  # 🦐 Picoclaw posture/advisory/drift/supply-chain checks
-│   ├── picoclaw-self-pen-testing/   # 🧪 Picoclaw self-pen-testing checks (separate package)
-│   └── soul-guardian/               # 👻 File integrity skill
-├── utils/
-│   ├── package_skill.py             # Skill packager utility
-│   └── validate_skill.py            # Skill validator utility
-├── .github/workflows/
-│   ├── ci.yml                       # Cross-platform lint/type/build + tests
-│   ├── pages-verify.yml             # PR-only pages build/signing verification
-│   ├── poll-nvd-cves.yml            # CVE polling pipeline
-│   ├── community-advisory.yml       # Approved issue -> advisory PR
-│   ├── skill-release.yml            # Skill release/signing pipeline
-│   ├── deploy-pages.yml             # GitHub Pages deployment
-│   ├── wiki-sync.yml                # Sync repo wiki/ to GitHub Wiki
-│   ├── codeql.yml                   # CodeQL security analysis
-│   └── scorecard.yml                # OpenSSF Scorecard checks
-└── public/                          # Static assets + generated wiki exports
-```
-
----
-
-Contribution
-
-Nous saluons les contributions! Voir [CONTRIBUTING.md](CONTRIBUTING.md) pour les lignes directrices.
-
-### Soumettre des avis de sécurité
-
-Trouvé un vecteur d'injection rapide, une compétence malveillante ou une vulnérabilité à la sécurité? Signalez-le via GitHub Questions :
-
-1. Ouvrir un nouveau numéro en utilisant le modèle **Rapport d'incident de sécurité**
-2. Remplissez les champs requis (série, type, description, compétences affectées)
-3. Un responsable examinera et ajoutera l'étiquette `advisory-approved`
-4. L'avis est automatiquement publié sur le flux sous la forme de `CLAW-{YEAR}-{ISSUE#}`
-
-Voir [CONTRIBUTING.md](CONTRIBUTING.md#submitting-security-advisories) pour des lignes directrices détaillées.
-
-Ajouter de nouvelles compétences
-
-1. Créer un dossier de compétences sous `skills/`
-2. Ajouter `skill.json` avec les métadonnées requises et SBOM
-3. Ajouter `SKILL.md` avec des instructions lisibles par agent
-4. Valider avec `python utils/validate_skill.py skills/your-skill`
-5. Soumettre un rapport de situation pour examen
-
-Source de documentation de la vérité
-
-Pour tout le contenu wiki, éditer des fichiers sous `wiki/` dans ce dépôt. Le Wiki GitHub (`<repo>.wiki.git`) est synchronisé depuis `wiki/` par `.github/workflows/wiki-sync.yml` lorsque `wiki/**` change sur `main`.
-
-Les exportations de LLM sont générées par `wiki/` vers `public/wiki/`:
-- `/wiki/llms.txt` est l'exportation prête à LLM pour `wiki/INDEX.md` (ou un indice de repli généré si `INDEX.md` est manquant).
-- `/wiki/<page>/llms.txt` est l'export LLM-ready pour cette seule page wiki.
-
----
-
-Licence
-
-- Code source : GNU AGPL v3.0 ou ultérieur - Voir [LICENSE](LICENSE) pour plus de détails.
-- Polices dans `font/`: Licence séparée - Voir [`font/README.md`](font/README.md).
-
----
-
-<div align="center">
-
-**ClawSec** · Sécurité rapide, SentinelOne
-
-C'est-à-dire Renforcer les workflows d'agents, une compétence à la fois.
-
-</div>

README.ja.md

@@ -1,434 +0,0 @@
-<!-- AUTO-GENERATED TRANSLATION SCAFFOLD (ja)
-Source: README.md
-Review status: draft
--->
-
-# 日本語 Translation Scaffold
-
-This file is currently a draft scaffold. Use README.md as the canonical source.
-
-<h1 align="center">
-<img src="./img/prompt-icon.svg"alt="prompt-icon" 幅="40">
-ClawSec:AIエージェントのセキュリティスキルスイート
-<img src="./img/prompt-icon.svg"alt="prompt-icon" 幅="40">
-</h1>
-
-<div align="center">
-
-## 完全なセキュリティスキルスイートでOpenClaw、NanoClaw、およびヘルメスエージェントをセキュアに
-
-<h4>AIセキュリティプラットフォーム</h4>
-
-</div>
-
-<div align="center">
-
-お問い合わせ [Prompt Security Logo](./img/Black+Color.png)の特長
-<img src="./public/img/mascot.png"alt="clawsec mascot" 幅="200" />
-
-</div>
-<div align="center">
-
-ブーツ **ライブ時: [https://clawsec.prompt.security](https://clawsec.prompt.security) [https://prompt.security/clawsec](https://prompt.security/clawsec)**
-
-[![CI](https://github.com/prompt-security/clawsec/actions/workflows/ci.yml/badge.svg)(https://github.com/prompt-security/clawsec/actions/workflows/ci.yml)
-[![Deploy Pages](https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml/badge.svg)(https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml)
-[![Poll NVD CVEs](https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml/badge.svg)(https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml)
-
-
-</div>
-
-お問い合わせ
-
-## 翻訳
-
-- Español: [README.es.md](README.es.md)
-- 한국어: [README.ko.md](README.ko.md)
-
-## 🦞 ClawSecとは?
-
-ClawSec は、AI エージェント プラットフォームの**完全なセキュリティ スキル スイートです。 エージェントの認知アーキテクチャを迅速注入、ドリフト、悪意のある指示に対して、統一されたセキュリティ監視、完全性検証、脅威インテリジェンス保護を提供します。
-
-## 対応プラットフォーム
-
-- **OpenClaw**(MoltBot、Clawdbot、およびクローン) - スキルインストーラ、ファイルの完全性保護、およびセキュリティ監査とフルスイート
-- **ナノクロー** - コンテナ化されたもの 諮問監視、署名検証、ファイルの整合性のためのMCPツールを使用したAppボットセキュリティ
--**Hermes** - 署名された諮問的フィード検証、アドバイザリーアウェアガード検証、決定的な検証生成、フェイルクローズド検証、ベースラインドリフト検出のためのヘルメスネイティブセキュリティスキル
--**Picoclaw** - 軽量AIゲートウェイセキュリティの姿勢は、アドバイザリーの意識、構成の漂流検出、リリースアーティファクト検証、およびオプションの別々のセルフペンテストパッケージでチェックします
-
-##スキル機能マトリックス
-
-お問い合わせ スキル名 | 対応プラットフォーム| 安全検証| 構成漂流 | エージェントセルフペンテスト| サプライチェーンインストール検証 |
-お問い合わせ
-| プレスリリース | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部
-| クローム・クローブ・チェッカー | OpenClaw + clawsec スイート・インテグレーション | ノー | ノー | ノー | ノー | ノー | ノー |
-| クロームフィード | OpenClaw | 有り | なし | なし | なし | 有り |
-| クローム・ナンクロー | ナノクロー | 可 | 可 | 有 | 有 | 有 | 有 | 有 | 有 | 有 |
-| クローム・スキャナ | オープンクロー | 有り | なし | 有り | 可 | 可 | 可 | 可 | 可 |
-| クロームスイート | オープンクローラ | 有り | 有り | なし | 有り | なし | 有り | なし | なし | なし | なし | なし | なし | なし | なし | なし | なし | なし |
-| プライバシーポリシー | 免責事項 | 免責事項 | 免責事項 | 免責事項 | 免責事項 | 免責事項 | 免責事項 |
-| ヘルメス・アテスタンス・ガーディアン | ヘルメス | はい(アドバイザリー・フィード・検証) | はい | なし | 限定(アドバイザリー・プレッションのみ・アーティファクト・シグネチャ・プロテナンス・インストール・検証なし) |
-| Openclaw-audit-watchdog | OpenClaw | ノー | ノー | ノー | ノー | ノー |
-| picoclaw-security-guardian | ピッコロー | 有り | なし | 有り | 有り |
-| picoclaw-self-pen-testing | ピッコロー | ノー | ノー | ノー | ノー |
-| 魂を守る人 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 | 営業部 |
-
-## コア機能
-
-- ** レース スイート インストーラ** - 完全性検証ですべてのセキュリティ スキルのワンコマンド インストール
-お問い合わせ ファイル整合性保護** - 重要なエージェントファイル(SOUL.md、IDENTITY.mdなど)のドリフト検出と自動復元
-- **セキュリティアドバイザリー** - 自動NVD CVEポーリングとコミュニティの脅威インテリジェンス
-- ** 絶縁 セキュリティ監査** - プロンプトインジェクションマーカーと脆弱性を検出するためにスクリプトをセルフチェック
-お問い合わせ チェックサム検証** - すべてのスキルアーティファクトのSHA256チェックサム
-- **健康チェック** - インストールされたすべてのスキルの自動更新と完全性検証
-
-お問い合わせ
-
-## ✔製品デモ
-
-下記のアニメーションプレビューはGIF(音声なし)です。 任意のプレビューをクリックして、オーディオでフルMP4を開きます。
-
-## デモをインストール (`clawsec-suite`)
-
-[![Install demo animated preview](public/video/install-demo-preview.gif)(パブリック/ビデオ/インストールデモ)
-
-直接リンク: [install-demo.mp4](public/video/install-demo.mp4)
-
-## ドリフト検出デモ(`soul-guardian`)
-
-[![Drift detection animated preview](public/video/soul-guardian-demo-preview.gif)(公共/ビデオ/ソウル-保護者-demo.mp4)
-
-直接リンク: [soul-guardian-demo.mp4](public/video/soul-guardian-demo.mp4)
-
-お問い合わせ
-
-## すぐにスタート
-
-##AIエージェントの###
-
-```bash
-# Install the ClawSec security suite
-npx clawhub@latest install clawsec-suite
-```
-
-インストール後、スイートは次のことができます。
-1。 公開されたスキルカタログからインストール可能な保護を発見
-2。 署名されたチェックサムを使用してリリースの完全性を確認します
-3。 アドバイザリーモニタリングとホックベースの保護フローの設定
-4。 オプションのスケジュールチェックを追加
-
-手動/ソース優先オプション:
-
-ツイート 採用情報 https://github.com/prompt-security/clawsec/releases/latest/download/SKILL.md とインストール手順に従います。
-
-人間のための#####
-
-この指示をAIエージェントにコピーします。
-
-ツイート `npx clawhub@latest install clawsec-suite`でClawSecをインストールし、生成された指示からセットアップ手順を完了します。
-
-##シェルとOSノート
-
-ClawSec スクリプトは以下の間に分割されます。
-- クロスプラットフォーム Node/Python ツーリング (`npm run build`、hook/setup `.mjs`、`utils/*.py`)
-- POSIXシェルワークフロー(`*.sh`、ほとんどの手動インストールスニペット)
-
-Linux/macOS (`bash`/`zsh`) の場合:
-- 引用されていないか二重引用された家変数を使用して下さい:`export INSTALL_ROOT="$HOME/.openclaw/skills"`
-- 単一の引用符の拡張可能なvars (例えば、`'$HOME/.openclaw/skills'`を避けるため) を**しない**
-
-Windows用(PowerShell):
-- プレファーの明示的な道の建物:
-- `$env:INSTALL_ROOT = Join-Path $HOME ".openclaw\\skills"`
-- `node "$env:INSTALL_ROOT\\clawsec-suite\\scripts\\setup_advisory_hook.mjs"`
-- POSIX `.sh`スクリプトはWSLまたはGit Bashが必要です。
-
-トラブルシューティング:`~/.openclaw/workspace/$HOME/...`などのディレクトリが表示された場合、ホーム変数は文字通り渡されました。 絶対パスまたは非引用のホーム式を使用して再実行します。
-
-お問い合わせ
-
-## 🧭プラットフォーム&スイートドキュメント
-
-詳細なプラットフォームとスイート docs は wiki モジュールで動作します。
-・ナノクロー:[wiki/modules/nanoclaw-integration.md](wiki/modules/nanoclaw-integration.md)
-- ヘルメス:[wiki/modules/hermes-attestation-guardian.md](wiki/modules/hermes-attestation-guardian.md)
-- ピコクロー:[wiki/modules/picoclaw-security-guardian.md](wiki/modules/picoclaw-security-guardian.md)
-- ピコクローセルフペンテスト: [wiki/modules/picoclaw-self-pen-testing.md](wiki/modules/picoclaw-self-pen-testing.md)の特長
-- ClawSec Suite (OpenClaw): [wiki/modules/clawsec-suite.md](wiki/modules/clawsec-suite.md)
-- CI/CDのパイプライン: [wiki/modules/automation-release.md](wiki/modules/automation-release.md)の特長
-
-クイックインストールリンク:
-- NanoClawは取付けます: [skills/clawsec-nanoclaw/INSTALL.md](skills/clawsec-nanoclaw/INSTALL.md)の特長
-- エルメススキルパッケージ:`skills/hermes-attestation-guardian/`
-- Picoclawの保護者のパッケージ:`skills/picoclaw-security-guardian/`
-- ピコクローセルフペンテストパッケージ:`skills/picoclaw-self-pen-testing/`
-- スイートパッケージ:`skills/clawsec-suite/`
-
-お問い合わせ
-
-## 安全保障アドバイザリーフィード
-
-ClawSecは、NISTのNational Vulnerability Database(NVD)から自動ポップアップし、継続的に更新されたセキュリティアドバイザリーフィードを維持します。
-
-## フィード URL
-
-```bash
-# Fetch latest advisories
-curl -s https://clawsec.prompt.security/advisories/feed.json | jq '.advisories[] | select(.severity == "critical" or .severity == "high")'
-```
-
-キヤノンのエンドポイント:`https://clawsec.prompt.security/advisories/feed.json`
-互換性ミラー(レガシー):`https://clawsec.prompt.security/releases/latest/download/feed.json`
-
-### 監視されたキーワード
-
-フィードの投票 CVE に関連する:
-- **OpenClawプラットフォーム**: `OpenClaw`、`clawdbot`、`Moltbot`
-- **ナノクロープラットフォーム**:`NanoClaw`、`WhatsApp-bot`、`baileys`
-- **Picoclaw Platform**:`Picoclaw`、`picoclaw`、軽量AIゲートウェイ、MCPゲートウェイ露出
-- プロンプト射出パターン
-- エージェントのセキュリティ脆弱性
-
-###exploitability コンテキスト
-
-ClawSec は、CVE のアドバイザリーを **exploitability context** で強化し、CVSS スコアを超えて、エージェントが現実的なリスクを評価するのを支援します。 新規に分析されたアドバイザリーには以下が含まれます。
-
--**Exploit Evidence**: 公共の悪用が野生に存在するかどうか
-- **武器の状態**: 悪用が一般的な攻撃フレームワークに統合されている場合
-- **攻撃要件**:成功した搾取(ネットワークアクセス、認証、ユーザーインタラクション)に必要な前提条件
--**リスクアセスメント**:技術的重大性を悪用性と組み合わせるコンテキストリスクレベル
-
-この機能は、エージェントが直面する脅威を理論的なリスクに優先し、よりスマートなセキュリティ決定を可能にします。
-
-##アドバイザリー・スキーマ
-
-**NVD CVE ** アドバイザリー:**
-```json
-{
-  "id": "CVE-2026-XXXXX",
-  "severity": "critical|high|medium|low",
-  "type": "vulnerable_skill",
-  "platforms": ["openclaw", "nanoclaw"],
-  "title": "Short description",
-  "description": "Full CVE description from NVD",
-  "published": "2026-02-01T00:00:00Z",
-  "cvss_score": 8.8,
-  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-XXXXX",
-  "exploitability_score": "high|medium|low|unknown",
-  "exploitability_rationale": "Why this CVE is or is not likely exploitable in agent deployments",
-  "references": ["..."],
-  "action": "Recommended remediation"
-}
-```
-
-**コミュニティアドバイザリー:**
-```json
-{
-  "id": "CLAW-2026-0042",
-  "severity": "high",
-  "type": "prompt_injection|vulnerable_skill|tampering_attempt",
-  "platforms": ["nanoclaw"],
-  "title": "Short description",
-  "description": "Detailed description from issue",
-  "published": "2026-02-01T00:00:00Z",
-  "affected": ["skill-name@1.0.0"],
-  "source": "Community Report",
-  "github_issue_url": "https://github.com/.../issues/42",
-  "action": "Recommended remediation"
-}
-```
-
-**プラットフォーム値:**
-- `"openclaw"` - OpenClaw/Clawdbot/Molt ボットのみ
-- `"nanoclaw"` - ナノクローのみ
-- `"hermes"` - ヘルメスのみ
-- `"picoclaw"` - ピコクローのみ
-- `["openclaw", "nanoclaw", "hermes", "picoclaw"]` - すべてのコアプラットフォーム
-- (empty/missing) - すべてのプラットフォーム(後方互換)
-
-お問い合わせ
-
-## は、CI/CD パイプライン
-
-CI/CD パイプラインの詳細は wiki モジュールページに移動しました。
-- [wiki/modules/automation-release.md](wiki/modules/automation-release.md)
-
-関連操作 docs:
-- [wiki/security-signing-runbook.md](wiki/security-signing-runbook.md)
-- [wiki/migration-signed-feed.md](wiki/migration-signed-feed.md)
-
-お問い合わせ
-
-## ️️ オフラインツール
-
-ClawSecには ローカルスキル開発と検証のためのPythonユーティリティ。
-
-##スキルバリデータ
-
-必要なスキーマに対してスキルフォルダーを検証します。
-
-```bash
-python utils/validate_skill.py skills/clawsec-feed
-```
-
-チェック:
-- `skill.json`が存在し、有効なJSON
-- 必須フィールド(名前、バージョン、説明、著者、ライセンス)
-- SBOMファイルが存在し、読みやすく
-- OpenClawメタデータを適切に構造化
-
-##スキルチェックサムジェネレーター
-
-`checksums.json` を SHA256 のハッシュで生成します。
-
-```bash
-python utils/package_skill.py skills/clawsec-feed ./dist
-```
-
-出力:
-- `checksums.json` - SHA256ハッシュの検証
-
-お問い合わせ
-
-## ローカル開発
-
-### 前提条件
-
-- Node.js 20 +
-- Python 3.10+(オフラインツール用)
-- 午後
-
-### セットアップ
-
-```bash
-# Install dependencies
-npm install
-
-# Start development server
-npm run dev
-```
-
-################################################################################################################################################################################################################################################################ ローカルデータを出力
-
-```bash
-# Populate skills catalog from local skills/ directory
-./scripts/populate-local-skills.sh
-
-# Populate advisory feed with real NVD CVE data
-./scripts/populate-local-feed.sh --days 120
-
-# Generate wiki llms exports from wiki/ (for local preview)
-./scripts/populate-local-wiki.sh
-
-# Direct generator entrypoint (used by predev/prebuild)
-npm run gen:wiki-llms
-```
-
-注意:
-- `npm run dev` と `npm run build` は自動的に wiki `llms.txt` のエクスポート (`predev`/`prebuild` のホック) を再生成します。
-- `public/wiki/`は出力(ローカル+CI)を生成し、意図的に無視されます。
-
-## ビルド
-
-```bash
-npm run build
-```
-
-お問い合わせ
-
-## 📁 プロジェクト構造
-
-```
-├── advisories/
-│   ├── feed.json                    # Main advisory feed
-│   ├── feed.json.sig                # Detached signature for feed.json
-│   └── feed-signing-public.pem      # Public key for feed verification
-├── components/                      # React components
-├── pages/                           # Route/page components
-├── wiki/                            # Source-of-truth docs (synced to GitHub Wiki)
-├── scripts/
-│   ├── generate-wiki-llms.mjs       # wiki/*.md -> public/wiki/**/llms.txt
-│   ├── populate-local-feed.sh       # Local CVE feed populator
-│   ├── populate-local-skills.sh     # Local skills catalog populator
-│   ├── populate-local-wiki.sh       # Local wiki llms export populator
-│   ├── prepare-to-push.sh           # Local CI-style quality gate
-│   ├── validate-release-links.sh    # Release link checks
-│   └── release-skill.sh             # Manual skill release helper
-├── skills/
-│   ├── claw-release/                # 🚀 Release automation workflow skill
-│   ├── clawsec-suite/               # 📦 Suite installer (skill-of-skills)
-│   ├── clawsec-feed/                # 📡 Advisory feed skill
-│   ├── clawsec-scanner/             # 🔍 Vulnerability scanner (deps + SAST + OpenClaw DAST)
-│   ├── clawsec-nanoclaw/            # 📱 NanoClaw platform security suite
-│   ├── clawsec-clawhub-checker/     # 🧪 ClawHub reputation checks
-│   ├── clawtributor/                # 🤝 Community reporting skill
-│   ├── hermes-attestation-guardian/ # 🛡️ Hermes attestation + drift verification
-│   ├── openclaw-audit-watchdog/     # 🔭 Automated audit skill
-│   ├── picoclaw-security-guardian/  # 🦐 Picoclaw posture/advisory/drift/supply-chain checks
-│   ├── picoclaw-self-pen-testing/   # 🧪 Picoclaw self-pen-testing checks (separate package)
-│   └── soul-guardian/               # 👻 File integrity skill
-├── utils/
-│   ├── package_skill.py             # Skill packager utility
-│   └── validate_skill.py            # Skill validator utility
-├── .github/workflows/
-│   ├── ci.yml                       # Cross-platform lint/type/build + tests
-│   ├── pages-verify.yml             # PR-only pages build/signing verification
-│   ├── poll-nvd-cves.yml            # CVE polling pipeline
-│   ├── community-advisory.yml       # Approved issue -> advisory PR
-│   ├── skill-release.yml            # Skill release/signing pipeline
-│   ├── deploy-pages.yml             # GitHub Pages deployment
-│   ├── wiki-sync.yml                # Sync repo wiki/ to GitHub Wiki
-│   ├── codeql.yml                   # CodeQL security analysis
-│   └── scorecard.yml                # OpenSSF Scorecard checks
-└── public/                          # Static assets + generated wiki exports
-```
-
-お問い合わせ
-
-## 社会貢献
-
-寄付を歓迎します! ガイドラインの[CONTRIBUTING.md](CONTRIBUTING.md)をご覧ください。
-
-### 提出セキュリティアドバイザリー
-
-迅速な注射ベクトル、悪意のあるスキル、またはセキュリティ脆弱性を発見しましたか? GitHub の問題で報告する:
-
-1。 **セキュリティインシデントレポート**テンプレートを使用して新しい問題を開きます
-2。 必須項目を記入(重度、種類、説明、影響を受けたスキル)
-3。 メンテナーが`advisory-approved`ラベルを見直し、追加します
-4。 アドバイザリーが`CLAW-{YEAR}-{ISSUE#}`としてフィードに自動的に公開されます
-
-詳細は[CONTRIBUTING.md](CONTRIBUTING.md#submitting-security-advisories)をご覧ください。
-
-##新規スキルの追加
-
-1。 `skills/`でスキルフォルダを作成する
-2。 必要なメタデータとSBOMで`skill.json`を追加
-3。 エージェント読み取り可能な指示で`SKILL.md`を追加
-4. `python utils/validate_skill.py skills/your-skill`と検証
-5。 レビューのPRを提出する
-
-## ドキュメント 真実のソース
-
-すべてのwikiコンテンツについては、このリポジトリの`wiki/`でファイルを編集します。 GitHub Wiki (`<repo>.wiki.git`) は、`main` が `.github/workflows/wiki-sync.yml` から `wiki/**` が `main` で変更されたときに、`.github/workflows/wiki-sync.yml` から同期されます。
-
-LLM エクスポートは `wiki/` から `public/wiki/` に生成されます。
-- `/wiki/llms.txt` は `wiki/INDEX.md` の LLM-ready エクスポート (または `INDEX.md` が見つからない場合は生成されたフォールバックインデックス) です。
-- `/wiki/<page>/llms.txt`は、その単一のwikiページのためのLM-readyエクスポートです。
-
-お問い合わせ
-
-## ライセンス
-
-- ソースコード:GNU AGPL v3.0以降 - 詳細は[LICENSE](LICENSE)を参照してください。
-- `font/`のフォント: ライセンス別 - [`font/README.md`](font/README.md) をご覧ください。
-
-お問い合わせ
-
-<div align="center">
-
-**ClawSec**・Prompt Security、SentinelOne **
-
-    エージェントのワークフローを強化し、一度に1つのスキル。
-
-</div>

README.ko.md

@@ -1,59 +0,0 @@
-# ClawSec: AI 에이전트를 위한 보안 스킬 스위트
-
-> 한국어 번역 (초기 버전)
-
-## 🌍 번역
-- English (source of truth): [README.md](README.md)
-- Español: [README.es.md](README.es.md)
-- 한국어: `README.ko.md`
-
-## ✅ 번역 상태 (Korean Phase 1)
-이 한국어 문서는 핵심 온보딩/운영 흐름을 우선 제공합니다.
-고급 스키마, 전체 CI/CD 세부사항, 최신 기준 문서는 영어 README를 참고하세요.
-
-## 🦞 ClawSec란?
-ClawSec은 **OpenClaw, NanoClaw, Hermes, Picoclaw 같은 AI 에이전트 플랫폼용 종합 보안 스킬 스위트**입니다.
-프롬프트 인젝션, 드리프트, 악성 지시로부터 에이전트 동작을 보호하기 위해
-통합 보안 모니터링, 무결성 검증, 위협 인텔리전스를 제공합니다.
-
-## 🚀 빠른 시작
-
-### AI 에이전트용
-```bash
-npx clawhub@latest install clawsec-suite
-```
-
-설치 후 ClawSec 스위트는 다음을 수행할 수 있습니다:
-1. 공개 스킬 카탈로그에서 설치 가능한 보호 기능 탐색
-2. 서명된 체크섬을 통한 릴리스 무결성 검증
-3. advisory 모니터링 및 훅 기반 보호 흐름 설정
-4. 선택적 스케줄 점검 추가
-
-### 사람 운영자용
-에이전트에게 다음 지시를 전달하세요:
-
-· `npx clawhub@latest install clawsec-suite`로 ClawSec을 설치 한 다음 생성 된 지침에서 설정 단계를 완료하십시오.
-
-## 🧭 위키 문서
-플랫폼/스위트 상세 문서는 wiki 모듈을 참고하세요:
-- [wiki/modules/clawsec-suite.md](wiki/modules/clawsec-suite.md)
-- [wiki/modules/nanoclaw-integration.md](wiki/modules/nanoclaw-integration.md)
-- [wiki/modules/hermes-attestation-guardian.md](wiki/modules/hermes-attestation-guardian.md)
-- [wiki/modules/picoclaw-security-guardian.md](wiki/modules/picoclaw-security-guardian.md)
-
-## 📡 보안 advisory 피드
-정식 엔드포인트:
-- `https://clawsec.prompt.security/advisories/feed.json`
-
-## 🛠️ 로컬 개발
-```bash
-npm install
-./scripts/populate-local-skills.sh
-./scripts/populate-local-feed.sh --days 120
-npm run gen:wiki-llms
-npm run dev
-```
-
-## 📄 라이선스
-- Source code: GNU AGPL v3.0 or later — [LICENSE](LICENSE)
-- Font assets: [`font/README.md`](font/README.md)

README.md

@@ -6,7 +6,7 @@
 
 <div align="center">
 
-## Secure Your OpenClaw, NanoClaw, and Hermes Agents with a Complete Security Skill Suite
+## Secure Your OpenClaw Bots with a Complete Security Skill Suite
 
 <h4>Brought to you by <a href="https://prompt.security">Prompt Security</a>, the Platform for AI Security</h4>
 
@@ -31,45 +31,9 @@
 
 ---
 
-## 🌍 Translations
-
-[Deutsch](README.de.md) | [Español](README.es.md) | [Français](README.fr.md) | [日本語](README.ja.md) | [한국어](README.ko.md) | **English**
-
-Wiki indexes: [DE](wiki/de/INDEX.md) · [ES](wiki/es/INDEX.md) · [FR](wiki/fr/INDEX.md) · [JA](wiki/ja/INDEX.md) · [KO](wiki/ko/INDEX.md) · [EN](wiki/INDEX.md)
-
 ## 🦞 What is ClawSec?
 
-ClawSec is a **complete security skill suite for AI agent platforms**. It provides unified security monitoring, integrity verification, and threat intelligence-protecting your agent's cognitive architecture against prompt injection, drift, and malicious instructions.
-
-### Supported Platforms
-
-- **OpenClaw** (MoltBot, Clawdbot, and clones) - Full suite with skill installer, file integrity protection, and security audits
-- **NanoClaw** - Containerized WhatsApp bot security with MCP tools for advisory monitoring, signature verification, and file integrity
-- **Hermes** - Hermes-native security skills for signed advisory feed verification, advisory-aware guarded verification, deterministic attestation generation, fail-closed verification, and baseline drift detection
-- **Picoclaw** - Lightweight AI gateway security posture checks with advisory awareness, config drift detection, release-artifact verification, and an optional separate self-pen-testing package
-
-### Skill Feature Matrix
-
-| Skill name | supported platform| security feed verification| config drift | agent self pen testing| supply-chain install verification | runtime traffic monitoring |
-|---|---|---|---|---|---|---|
-| claw-release | OpenClaw | No | No | No | Yes | No |
-| clawsec-clawhub-checker | OpenClaw + clawsec-suite integration | No | No | No | Yes | No |
-| clawsec-feed | OpenClaw | Yes | No | No | Yes | No |
-| clawsec-nanoclaw | NanoClaw | Yes | Yes | Yes | Yes | No |
-| clawsec-scanner | OpenClaw | Yes | No | Yes | Yes | No |
-| clawsec-suite | OpenClaw | Yes | Yes | No | Yes | No |
-| clawtributor | OpenClaw | Yes | No | No | No | No |
-| hermes-attestation-guardian | Hermes | Yes (signed advisory feed verification) | Yes | No | Limited (advisory preflight gating only; no artifact signature/provenance install verification) | No |
-| hermes-traffic-guardian | Hermes | No | Planned posture export only | No | No | Spec baseline |
-| nanoclaw-traffic-guardian | NanoClaw | No | No | No | No | Spec baseline |
-| openclaw-audit-watchdog | OpenClaw | No | No | Yes | No | No |
-| openclaw-traffic-guardian | OpenClaw | No | No | No | No | Spec baseline |
-| picoclaw-security-guardian | Picoclaw | Yes | Yes | No | Yes | No |
-| picoclaw-self-pen-testing | Picoclaw | No | No | Yes | No | No |
-| picoclaw-traffic-guardian | Picoclaw | No | Planned profile export only | No | No | Spec baseline |
-| soul-guardian | OpenClaw | No | Yes | No | No | No |
-
-`Spec baseline` means the skill folder, metadata, frontmatter, and implementation contract exist, but runtime proxy code is intentionally left for platform-specific builders.
+ClawSec is a **complete security skill suite for the OpenClaw family of agents (Moltbot, Clawdbot, some clones)**. It provides a unified installer that deploys, verifies, and maintains security skills-protecting your agent's cognitive architecture against prompt injection, drift, and malicious instructions.
 
 ### Core Capabilities
 
@@ -78,90 +42,56 @@ ClawSec is a **complete security skill suite for AI agent platforms**. It provid
 - **📡 Live Security Advisories** - Automated NVD CVE polling and community threat intelligence
 - **🔍 Security Audits** - Self-check scripts to detect prompt injection markers and vulnerabilities
 - **🔐 Checksum Verification** - SHA256 checksums for all skill artifacts
-- **Runtime Traffic Monitoring Baselines** - Platform-specific specs for opt-in proxy inspection, exfiltration detection, and inbound injection detection
 - **Health Checks** - Automated updates and integrity verification for all installed skills
 
 ---
 
-## 🎬 Product Demos
-
-Animated previews below are GIFs (no audio). Click any preview to open the full MP4 with audio.
-
-### Install Demo (`clawsec-suite`)
-
-[![Install demo animated preview](public/video/install-demo-preview.gif)](public/video/install-demo.mp4)
-
-Direct link: [install-demo.mp4](public/video/install-demo.mp4)
-
-### Drift Detection Demo (`soul-guardian`)
-
-[![Drift detection animated preview](public/video/soul-guardian-demo-preview.gif)](public/video/soul-guardian-demo.mp4)
-
-Direct link: [soul-guardian-demo.mp4](public/video/soul-guardian-demo.mp4)
-
----
-
 ## 🚀 Quick Start
 
 ### For AI Agents
 
 ```bash
-# Install the ClawSec security suite
-npx clawhub@latest install clawsec-suite
+# Fetch and install the ClawSec security suite
+curl -sL https://clawsec.prompt.security/releases/latest/download/SKILL.md
 ```
 
-After install, the suite can:
-1. Discover installable protections from the published skills catalog
-2. Verify release integrity using signed checksums
-3. Set up advisory monitoring and hook-based protection flows
-4. Add optional scheduled checks
-
-Manual/source-first option:
-
-> Read https://github.com/prompt-security/clawsec/releases/latest/download/SKILL.md and follow the installation instructions.
+The skill file contains deployment instructions. Your agent will:
+1. Detect its agent family (OpenClaw/MoltBot/ClawdBot or other)
+2. Install appropriate skills from the catalog
+3. Verify integrity using checksums
+4. Set up cron update checks
 
 ### For Humans
 
 Copy this instruction to your AI agent:
 
-> Install ClawSec with `npx clawhub@latest install clawsec-suite`, then complete the setup steps from the generated instructions.
-
-### Shell and OS Notes
-
-ClawSec scripts are split between:
-- Cross-platform Node/Python tooling (`npm run build`, hook/setup `.mjs`, `utils/*.py`)
-- POSIX shell workflows (`*.sh`, most manual install snippets)
-
-For Linux/macOS (`bash`/`zsh`):
-- Use unquoted or double-quoted home vars: `export INSTALL_ROOT="$HOME/.openclaw/skills"`
-- Do **not** single-quote expandable vars (for example, avoid `'$HOME/.openclaw/skills'`)
-
-For Windows (PowerShell):
-- Prefer explicit path building:
-  - `$env:INSTALL_ROOT = Join-Path $HOME ".openclaw\\skills"`
-  - `node "$env:INSTALL_ROOT\\clawsec-suite\\scripts\\setup_advisory_hook.mjs"`
-- POSIX `.sh` scripts require WSL or Git Bash.
-
-Troubleshooting: if you see directories such as `~/.openclaw/workspace/$HOME/...`, a home variable was passed literally. Re-run using an absolute path or an unquoted home expression.
+> Read https://clawsec.prompt.security/releases/latest/download/SKILL.md and follow the instructions to install the protection skill suite.
 
 ---
 
-## 🧭 Platform & Suite Documentation
+## 📦 ClawSec Suite
 
-Detailed platform and suite docs live in the wiki modules:
-- NanoClaw: [wiki/modules/nanoclaw-integration.md](wiki/modules/nanoclaw-integration.md)
-- Hermes: [wiki/modules/hermes-attestation-guardian.md](wiki/modules/hermes-attestation-guardian.md)
-- Picoclaw: [wiki/modules/picoclaw-security-guardian.md](wiki/modules/picoclaw-security-guardian.md)
-- Picoclaw self-pen-testing: [wiki/modules/picoclaw-self-pen-testing.md](wiki/modules/picoclaw-self-pen-testing.md)
-- ClawSec Suite (OpenClaw): [wiki/modules/clawsec-suite.md](wiki/modules/clawsec-suite.md)
-- CI/CD pipelines: [wiki/modules/automation-release.md](wiki/modules/automation-release.md)
+The **clawsec-suite** is a skill-of-skills manager that installs, verifies, and maintains security skills from the ClawSec catalog.
 
-Quick install links:
-- NanoClaw install: [skills/clawsec-nanoclaw/INSTALL.md](skills/clawsec-nanoclaw/INSTALL.md)
-- Hermes skill package: `skills/hermes-attestation-guardian/`
-- Picoclaw guardian package: `skills/picoclaw-security-guardian/`
-- Picoclaw self-pen-testing package: `skills/picoclaw-self-pen-testing/`
-- Suite package: `skills/clawsec-suite/`
+### Skills in the Suite
+
+| Skill | Description | Installation | Compatibility |
+|-------|-------------|--------------|---------------|
+| 📡 **clawsec-feed** | Security advisory feed monitoring with live CVE updates | ✅ Included by default | All agents |
+| 🔭 **openclaw-audit-watchdog** | Automated daily audits with email reporting | ⚙️ Optional (install separately) | OpenClaw/MoltBot/ClawdBot |
+| 👻 **soul-guardian** | Drift detection and file integrity guard with auto-restore | ⚙️ Optional | All agents |
+| 🤝 **clawtributor** | Community incident reporting | ❌ Optional (Explicit request) | All agents |
+
+> ⚠️ **clawtributor** is not installed by default as it may share anonymized incident data. Install only on explicit user request.
+
+> ⚠️ **openclaw-audit-watchdog** is tailored for the OpenClaw/MoltBot/ClawdBot agent family. Other agents receive the universal skill set.
+
+### Suite Features
+
+- **Integrity Verification** - Every skill package includes `checksums.json` with SHA256 hashes
+- **Updates** - Automatic checks for new skill versions 
+- **Self-Healing** - Failed integrity checks trigger automatic re-download from trusted releases
+- **Advisory Cross-Reference** - Installed skills are checked against the security advisory feed
 
 ---
 
@@ -176,29 +106,15 @@ ClawSec maintains a continuously updated security advisory feed, automatically p
 curl -s https://clawsec.prompt.security/advisories/feed.json | jq '.advisories[] | select(.severity == "critical" or .severity == "high")'
 ```
 
-Canonical endpoint: `https://clawsec.prompt.security/advisories/feed.json`  
-Compatibility mirror (legacy): `https://clawsec.prompt.security/releases/latest/download/feed.json`
-
 ### Monitored Keywords
 
 The feed polls CVEs related to:
-- **OpenClaw Platform**: `OpenClaw`, `clawdbot`, `Moltbot`
-- **NanoClaw Platform**: `NanoClaw`, `WhatsApp-bot`, `baileys`
-- **Picoclaw Platform**: `Picoclaw`, `picoclaw`, lightweight AI gateways, MCP gateway exposure
+- `OpenClaw`
+- `clawdbot`  
+- `Moltbot`
 - Prompt injection patterns
 - Agent security vulnerabilities
 
-### Exploitability Context
-
-ClawSec enriches CVE advisories with **exploitability context** to help agents assess real-world risk beyond raw CVSS scores. Newly analyzed advisories can include:
-
-- **Exploit Evidence**: Whether public exploits exist in the wild
-- **Weaponization Status**: If exploits are integrated into common attack frameworks
-- **Attack Requirements**: Prerequisites needed for successful exploitation (network access, authentication, user interaction)
-- **Risk Assessment**: Contextualized risk level combining technical severity with exploitability
-
-This feature helps agents prioritize vulnerabilities that pose immediate threats versus theoretical risks, enabling smarter security decisions.
-
 ### Advisory Schema
 
 **NVD CVE Advisory:**
@@ -207,14 +123,11 @@ This feature helps agents prioritize vulnerabilities that pose immediate threats
   "id": "CVE-2026-XXXXX",
   "severity": "critical|high|medium|low",
   "type": "vulnerable_skill",
-  "platforms": ["openclaw", "nanoclaw"],
   "title": "Short description",
   "description": "Full CVE description from NVD",
   "published": "2026-02-01T00:00:00Z",
   "cvss_score": 8.8,
   "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-XXXXX",
-  "exploitability_score": "high|medium|low|unknown",
-  "exploitability_rationale": "Why this CVE is or is not likely exploitable in agent deployments",
   "references": ["..."],
   "action": "Recommended remediation"
 }
@@ -226,7 +139,6 @@ This feature helps agents prioritize vulnerabilities that pose immediate threats
   "id": "CLAW-2026-0042",
   "severity": "high",
   "type": "prompt_injection|vulnerable_skill|tampering_attempt",
-  "platforms": ["nanoclaw"],
   "title": "Short description",
   "description": "Detailed description from issue",
   "published": "2026-02-01T00:00:00Z",
@@ -237,24 +149,83 @@ This feature helps agents prioritize vulnerabilities that pose immediate threats
 }
 ```
 
-**Platform values:**
-- `"openclaw"` - OpenClaw/Clawdbot/MoltBot only
-- `"nanoclaw"` - NanoClaw only
-- `"hermes"` - Hermes only
-- `"picoclaw"` - Picoclaw only
-- `["openclaw", "nanoclaw", "hermes", "picoclaw"]` - All core platforms
-- (empty/missing) - All platforms (backward compatible)
-
 ---
 
 ## 🔄 CI/CD Pipelines
 
-CI/CD pipeline details were moved to the wiki module page:
-- [wiki/modules/automation-release.md](wiki/modules/automation-release.md)
+ClawSec uses automated pipelines for continuous security updates and skill distribution.
 
-Related operations docs:
-- [wiki/security-signing-runbook.md](wiki/security-signing-runbook.md)
-- [wiki/migration-signed-feed.md](wiki/migration-signed-feed.md)
+### Automated Workflows
+
+| Workflow | Trigger | Description |
+|----------|---------|-------------|
+| **poll-nvd-cves.yml** | Daily cron (06:00 UTC) | Polls NVD for new CVEs, updates feed |
+| **community-advisory.yml** | Issue labeled `advisory-approved` | Processes community reports into advisories |
+| **skill-release.yml** | `<skill>-v*.*.*` tags | Packages individual skills with checksums to GitHub Releases |
+| **deploy-pages.yml** | Push to main | Builds and deploys the web interface to GitHub Pages |
+
+### Skill Release Pipeline
+
+When a skill is tagged (e.g., `soul-guardian-v1.0.0`), the pipeline:
+
+1. **Validates** - Checks `skill.json` version matches tag
+2. **Enforces key consistency** - Verifies pinned release key references are consistent across repo PEMs and `skills/clawsec-suite/SKILL.md`
+3. **Generates Checksums** - Creates `checksums.json` with SHA256 hashes for all SBOM files
+4. **Signs + verifies** - Signs `checksums.json` and validates the generated `signing-public.pem` fingerprint against canonical repo key material
+5. **Releases** - Publishes to GitHub Releases with all artifacts
+6. **Supersedes Old Releases** - Marks older versions (same major) as pre-releases
+7. **Triggers Pages Update** - Refreshes the skills catalog on the website
+
+### Signing Key Consistency Guardrails
+
+To prevent supply-chain drift, CI now fails fast when signing key references diverge.
+
+Guardrail script:
+- `scripts/ci/verify_signing_key_consistency.sh`
+
+What it checks:
+- `skills/clawsec-suite/SKILL.md` inline public key fingerprint matches `RELEASE_PUBKEY_SHA256`
+- Canonical PEM files all match the same fingerprint:
+  - `clawsec-signing-public.pem`
+  - `advisories/feed-signing-public.pem`
+  - `skills/clawsec-suite/advisories/feed-signing-public.pem`
+- Generated public key in workflows matches canonical key:
+  - `release-assets/signing-public.pem` (release workflow)
+  - `public/signing-public.pem` (pages workflow)
+
+Where enforced:
+- `.github/workflows/skill-release.yml`
+- `.github/workflows/deploy-pages.yml`
+
+### Release Versioning & Superseding
+
+ClawSec follows [semantic versioning](https://semver.org/). When a new version is released:
+
+| Scenario | Behavior |
+|----------|----------|
+| New patch/minor (e.g., 1.0.1, 1.1.0) | Previous releases with same major version are **deleted** |
+| New major (e.g., 2.0.0) | Previous major version (1.x.x) remains for backwards compatibility |
+
+**Why do old releases disappear?**
+
+When you release `skill-v0.0.2`, the previous `skill-v0.0.1` release is automatically deleted to keep the releases page clean. Only the latest version within each major version is retained.
+
+- **Git tags are preserved** - You can always recreate a release from an existing tag if needed
+- **Major versions coexist** - Both `skill-v1.x.x` and `skill-v2.x.x` latest releases remain available for backwards compatibility
+
+### Release Artifacts
+
+Each skill release includes:
+- `checksums.json` - SHA256 hashes for integrity verification
+- `skill.json` - Skill metadata
+- `SKILL.md` - Main skill documentation
+- Additional files from SBOM (scripts, configs, etc.)
+
+### Signing Operations Documentation
+
+For feed/release signing rollout and operations guidance:
+- [`SECURITY-SIGNING.md`](SECURITY-SIGNING.md) - key generation, GitHub secrets, rotation/revocation, incident response
+- [`MIGRATION-SIGNED-FEED.md`](MIGRATION-SIGNED-FEED.md) - phased migration from unsigned feed, enforcement gates, rollback plan
 
 ---
 
@@ -315,18 +286,8 @@ npm run dev
 
 # Populate advisory feed with real NVD CVE data
 ./scripts/populate-local-feed.sh --days 120
-
-# Generate wiki llms exports from wiki/ (for local preview)
-./scripts/populate-local-wiki.sh
-
-# Direct generator entrypoint (used by predev/prebuild)
-npm run gen:wiki-llms
 ```
 
-Notes:
-- `npm run dev` and `npm run build` automatically regenerate wiki `llms.txt` exports (`predev`/`prebuild` hooks).
-- `public/wiki/` is generated output (local + CI) and is intentionally gitignored.
-
 ### Build
 
 ```bash
@@ -339,47 +300,27 @@ npm run build
 
 ```
 ├── advisories/
-│   ├── feed.json                    # Main advisory feed
-│   ├── feed.json.sig                # Detached signature for feed.json
-│   └── feed-signing-public.pem      # Public key for feed verification
-├── components/                      # React components
-├── pages/                           # Route/page components
-├── wiki/                            # Source-of-truth docs (synced to GitHub Wiki)
+│   └── feed.json              # Main advisory feed (auto-updated from NVD)
+├── components/                 # React components
+├── pages/                      # Page components
 ├── scripts/
-│   ├── generate-wiki-llms.mjs       # wiki/*.md -> public/wiki/**/llms.txt
-│   ├── populate-local-feed.sh       # Local CVE feed populator
-│   ├── populate-local-skills.sh     # Local skills catalog populator
-│   ├── populate-local-wiki.sh       # Local wiki llms export populator
-│   ├── prepare-to-push.sh           # Local CI-style quality gate
-│   ├── validate-release-links.sh    # Release link checks
-│   └── release-skill.sh             # Manual skill release helper
+│   ├── populate-local-feed.sh # Local CVE feed populator
+│   ├── populate-local-skills.sh # Local skills catalog populator
+│   └── release-skill.sh       # Manual skill release helper
 ├── skills/
-│   ├── claw-release/                # 🚀 Release automation workflow skill
-│   ├── clawsec-suite/               # 📦 Suite installer (skill-of-skills)
-│   ├── clawsec-feed/                # 📡 Advisory feed skill
-│   ├── clawsec-scanner/             # 🔍 Vulnerability scanner (deps + SAST + OpenClaw DAST)
-│   ├── clawsec-nanoclaw/            # 📱 NanoClaw platform security suite
-│   ├── clawsec-clawhub-checker/     # 🧪 ClawHub reputation checks
-│   ├── clawtributor/                # 🤝 Community reporting skill
-│   ├── hermes-attestation-guardian/ # 🛡️ Hermes attestation + drift verification
-│   ├── openclaw-audit-watchdog/     # 🔭 Automated audit skill
-│   ├── picoclaw-security-guardian/  # 🦐 Picoclaw posture/advisory/drift/supply-chain checks
-│   ├── picoclaw-self-pen-testing/   # 🧪 Picoclaw self-pen-testing checks (separate package)
-│   └── soul-guardian/               # 👻 File integrity skill
+│   ├── clawsec-suite/       # 📦 Suite installer (skill-of-skills)
+│   ├── clawsec-feed/        # 📡 Advisory feed skill
+│   ├── clawtributor/           # 🤝 Community reporting skill
+│   ├── openclaw-audit-watchdog/ # 🔭 Automated audit skill
+│   └── soul-guardian/         # 👻 File integrity skill
 ├── utils/
-│   ├── package_skill.py             # Skill packager utility
-│   └── validate_skill.py            # Skill validator utility
+│   ├── package_skill.py       # Skill packager utility
+│   └── validate_skill.py      # Skill validator utility
 ├── .github/workflows/
-│   ├── ci.yml                       # Cross-platform lint/type/build + tests
-│   ├── pages-verify.yml             # PR-only pages build/signing verification
-│   ├── poll-nvd-cves.yml            # CVE polling pipeline
-│   ├── community-advisory.yml       # Approved issue -> advisory PR
-│   ├── skill-release.yml            # Skill release/signing pipeline
-│   ├── deploy-pages.yml             # GitHub Pages deployment
-│   ├── wiki-sync.yml                # Sync repo wiki/ to GitHub Wiki
-│   ├── codeql.yml                   # CodeQL security analysis
-│   └── scorecard.yml                # OpenSSF Scorecard checks
-└── public/                          # Static assets + generated wiki exports
+│   ├── poll-nvd-cves.yml      # CVE polling pipeline
+│   ├── skill-release.yml      # Skill release pipeline
+│   └── deploy-pages.yml       # Pages deployment
+└── public/                     # Static assets and published skills
 ```
 
 ---
@@ -407,19 +348,11 @@ See [CONTRIBUTING.md](CONTRIBUTING.md#submitting-security-advisories) for detail
 4. Validate with `python utils/validate_skill.py skills/your-skill`
 5. Submit a PR for review
 
-## 📚 Documentation Source of Truth
-
-For all wiki content, edit files under `wiki/` in this repository. The GitHub Wiki (`<repo>.wiki.git`) is synced from `wiki/` by `.github/workflows/wiki-sync.yml` when `wiki/**` changes on `main`.
-
-LLM exports are generated from `wiki/` into `public/wiki/`:
-- `/wiki/llms.txt` is the LLM-ready export for `wiki/INDEX.md` (or a generated fallback index if `INDEX.md` is missing).
-- `/wiki/<page>/llms.txt` is the LLM-ready export for that single wiki page.
-
 ---
 
 ## 📄 License
 
-- Source code: GNU AGPL v3.0 or later - See [LICENSE](LICENSE) for details.
+- Source code: MIT License - See [LICENSE](LICENSE) for details.
 - Fonts in `font/`: Licensed separately - See [`font/README.md`](font/README.md).
 
 ---

SECURITY-SIGNING.md

@@ -11,26 +11,22 @@ It covers:
 - key rotation and revocation
 - incident response
 
-## 2) Current operating state (important)
+## 2) Current branch reality (important)
 
-On `main`, advisory and release channels are signed and verified by default:
+As of branch `integration/signing-work`, advisory distribution is **unsigned**:
 
 - Feed writers:
-  - `.github/workflows/poll-nvd-cves.yml` updates `advisories/feed.json` and signs `advisories/feed.json.sig`
-  - `.github/workflows/community-advisory.yml` does the same for approved issue reports
-  - both sync signed feed artifacts into `skills/clawsec-feed/advisories/`
+  - `.github/workflows/poll-nvd-cves.yml` writes `advisories/feed.json` and `skills/clawsec-feed/advisories/feed.json`
+  - `.github/workflows/community-advisory.yml` writes the same files
 - Feed publish path:
-  - `.github/workflows/deploy-pages.yml` publishes `public/advisories/feed.json` + `.sig`
-  - generates and signs `public/checksums.json` + `public/checksums.sig`
-  - publishes canonical key as `public/signing-public.pem` and `public/advisories/feed-signing-public.pem`
-  - mirrors compatibility artifacts under `public/releases/latest/download/` (including `feed.json`, `feed.json.sig`, `checksums.json`, `checksums.sig`, `signing-public.pem`)
+  - `.github/workflows/deploy-pages.yml` copies to `public/advisories/feed.json`
+  - also mirrors to `public/releases/latest/download/advisories/feed.json`
 - Feed consumers:
   - `skills/clawsec-suite/hooks/clawsec-advisory-guardian/handler.ts`
   - `skills/clawsec-suite/scripts/guarded_skill_install.mjs`
-  - `skills/clawsec-nanoclaw/lib/advisories.ts`
-  - default feed URL is `https://clawsec.prompt.security/advisories/feed.json`
+  - both default to `https://clawsec.prompt.security/advisories/feed.json`
 
-Unsigned mode remains an explicit compatibility bypass (`CLAWSEC_ALLOW_UNSIGNED_FEED=1`) and is not the steady-state operating model.
+This document defines the **target operating model** for signed artifacts while preserving compatibility during migration.
 
 ## 3) Target signed artifacts
 
@@ -39,10 +35,10 @@ Unsigned mode remains an explicit compatibility bypass (`CLAWSEC_ALLOW_UNSIGNED_
 - `advisories/feed.json.sig` (detached Ed25519 signature; base64)
 - `advisories/feed-signing-public.pem` (pinned public key)
 
-### Release artifact channel
+### Release artifact channel (recommended)
 - `<release>/checksums.json`
 - `<release>/checksums.sig`
-- `<release>/signing-public.pem`
+- `advisories/release-signing-public.pem` (or equivalent repo-pinned location)
 
 ## 4) Key roles and custody
 
@@ -112,7 +108,7 @@ openssl pkeyutl -verify -rawin -pubin -inkey feed-signing-public.pem -in /tmp/pr
 
 ## 7) Workflow integration points
 
-This repo enforces signing as a post-mutation, pre-publish control.
+This repo already has feed mutation and deployment workflows. Signing should be inserted as a post-mutation, pre-publish control.
 
 ### Feed pipeline
 
@@ -120,31 +116,29 @@ Current feed mutation points:
 - `.github/workflows/poll-nvd-cves.yml`
 - `.github/workflows/community-advisory.yml`
 
-Current behavior:
-- workflow step signs `advisories/feed.json` into `advisories/feed.json.sig`
-- signing action verifies generated signatures during workflow execution
-- signed artifacts are committed via PR automation
+Target addition:
+- add signing step/workflow that:
+  1. regenerates deterministic feed checksums manifest (optional but recommended)
+  2. signs `advisories/feed.json` into `advisories/feed.json.sig`
+  3. verifies signature in CI before commit/publish
 
 ### Pages pipeline
 
 Current publisher:
 - `.github/workflows/deploy-pages.yml`
 
-Current behavior:
-- copies payload/signature to `public/advisories/`
-- generates + signs `public/checksums.json` and `public/checksums.sig`
-- publishes signing key to `public/signing-public.pem` and `public/advisories/feed-signing-public.pem`
-- mirrors advisory + signature/checksum/key companions into `public/releases/latest/download/` compatibility paths
+Target update:
+- copy `.sig` files to `public/advisories/` and `public/releases/latest/download/advisories/`
+- fail deploy if expected signed companions are missing after migration enforcement date
 
 ### Skill release pipeline (recommended hardening)
 
 Current release generator:
-- `.github/workflows/skill-release.yml`
+- `.github/workflows/skill-release.yml` creates `checksums.json`
 
-Current behavior:
-- creates `checksums.json`, signs it as `checksums.sig`, and verifies signature before publish
-- includes `signing-public.pem` in release assets
-- validates generated public-key fingerprint against canonical key material
+Target update:
+- sign `checksums.json` before `softprops/action-gh-release`
+- attach `checksums.sig` to each release
 
 ## 8) Rotation policy and runbook
 
@@ -212,23 +206,10 @@ For each release cycle or feed-signing run, retain:
 - operator/reviewer approvals
 - any exception or bypass rationale
 
-## 11) Minimum acceptance criteria before stricter policy changes
+## 11) Minimum acceptance criteria before enforcement
 
-Before tightening policy further (for example, removing compatibility bypass paths):
+Before requiring signatures in all clients:
 - signed artifacts are produced consistently for at least 2 weeks
 - deploy pipeline mirrors signature companions
 - one rollback drill and one key rotation drill completed successfully
 - incident response on-call owner identified and documented
-
-## Source References
-- advisories/feed.json
-- advisories/feed.json.sig
-- advisories/feed-signing-public.pem
-- clawsec-signing-public.pem
-- .github/actions/sign-and-verify/action.yml
-- .github/workflows/poll-nvd-cves.yml
-- .github/workflows/community-advisory.yml
-- .github/workflows/deploy-pages.yml
-- .github/workflows/skill-release.yml
-- scripts/ci/verify_signing_key_consistency.sh
-- wiki/migration-signed-feed.md

advisories/feed.json.sig

@@ -1 +0,0 @@
-v+PiWmjIkY6zdIyI9xJX0l0aTy0Azp1+LoZR6qaiDZJnXFuSBX4Sw/x5tMdTb0xSbqdDTJOZwwWI8coPVepzBw==

advisories/ghsa-without-cve.json.sig

@@ -1 +0,0 @@
-SCkRaPMF6IYDwZuR7/JJXxpB7A7ebuMvLqK827uWX0yfEJr7l2gyLpxvHsEpWJDzE4gchxd5yqJx5qF/yqNwAg==

components/AdvisoryCard.tsx

@@ -2,7 +2,6 @@ import React from 'react';
 import { Link } from 'react-router-dom';
 import { ExternalLink, Github } from 'lucide-react';
 import { Advisory } from '../types';
-import { AdvisoryPlatformBadge } from './AdvisoryPlatformBadge';
 
 interface AdvisoryCardProps {
   advisory: Advisory;
@@ -66,18 +65,6 @@ export const AdvisoryCard: React.FC<AdvisoryCardProps> = ({ advisory, formatDate
         {advisory.id}
       </h3>
       <p className="text-sm text-gray-400 line-clamp-3 mb-3">{advisory.title}</p>
-
-      {advisory.platforms && advisory.platforms.length > 0 && (
-        <div className="mb-3 flex flex-wrap gap-1.5">
-          {advisory.platforms.map((platform) => (
-            <AdvisoryPlatformBadge
-              key={`${advisory.id}-${platform}`}
-              platform={platform}
-              className="text-[11px] px-2 py-0.5 rounded"
-            />
-          ))}
-        </div>
-      )}
       
       {/* External link - stop propagation to allow clicking without navigating to detail */}
       {isCommunityReport && advisory.github_issue_url ? (

components/AdvisoryPlatformBadge.tsx

@@ -1,19 +0,0 @@
-import React from 'react';
-import { getPlatformDescriptor } from '../utils/advisoryPlatforms';
-
-interface AdvisoryPlatformBadgeProps {
-  platform: string;
-  className?: string;
-}
-
-export const AdvisoryPlatformBadge: React.FC<AdvisoryPlatformBadgeProps> = ({
-  platform,
-  className,
-}) => {
-  const { label, classes } = getPlatformDescriptor(platform);
-  const badgeClasses = ['uppercase tracking-wide', classes, className]
-    .filter(Boolean)
-    .join(' ');
-
-  return <span className={badgeClasses}>{label}</span>;
-};

components/Footer.tsx

@@ -4,7 +4,7 @@ export const Footer: React.FC = () => {
   return (
     <footer className="text-center py-6 mt-auto">
       <p className="text-gray-300 text-sm italic">
-        ClawSec is a project by Prompt Security, a SentinelOne company. It's not affiliated with OpenClaw or NanoClaw. Designed for security research and agentic workflow hardening.
+        ClawSec is a project by Prompt Security, a SentinelOne company. It's not affiliated with OpenClaw. Designed for security research and agentic workflow hardening.
       </p>
       <div className="flex justify-center gap-4 mt-4">
         <span className="text-2xl animate-pulse">🦞</span>

components/Header.tsx

@@ -1,6 +1,6 @@
 import React, { useState } from 'react';
 import { NavLink } from 'react-router-dom';
-import { Menu, X, Terminal, Layers, Rss, Home, Github, BookOpenText, PlayCircle } from 'lucide-react';
+import { Menu, X, Terminal, Layers, Rss, Home, Github } from 'lucide-react';
 
 export const Header: React.FC = () => {
   const [isOpen, setIsOpen] = useState(false);
@@ -9,8 +9,6 @@ export const Header: React.FC = () => {
     { label: 'Home', path: '/', icon: Home },
     { label: 'Skills', path: '/skills', icon: Layers },
     { label: 'Security Feed', path: '/feed', icon: Rss },
-    { label: 'Product Demo', path: '/demo', icon: PlayCircle },
-    { label: 'Wiki', path: '/wiki', icon: BookOpenText },
   ];
 
   const baseLink =

components/SkillCard.tsx

@@ -2,19 +2,16 @@ import React from 'react';
 import { Link } from 'react-router-dom';
 import { ArrowRight } from 'lucide-react';
 import type { SkillMetadata } from '../types';
-import { getPlatformDescriptor } from '../utils/advisoryPlatforms';
 
 interface SkillCardProps {
   skill: SkillMetadata;
 }
 
 export const SkillCard: React.FC<SkillCardProps> = ({ skill }) => {
-  const platforms = Array.isArray(skill.platforms) ? skill.platforms.slice(0, 4) : [];
-
   return (
     <Link
       to={`/skills/${skill.id}`}
-      className="group block bg-clawd-800 border border-clawd-700 rounded-lg p-5 hover:border-clawd-accent/30 hover:bg-clawd-800/80 transition-all duration-200"
+      className="group block bg-clawd-800 border border-clawd-700 rounded-xl p-5 hover:border-clawd-accent/30 hover:bg-clawd-800/80 transition-all duration-200"
     >
       <div className="flex items-center gap-3 mb-3">
         <span className="text-2xl">{skill.emoji || '📦'}</span>
@@ -30,23 +27,6 @@ export const SkillCard: React.FC<SkillCardProps> = ({ skill }) => {
         {skill.description}
       </p>
 
-      {platforms.length > 0 && (
-        <div className="flex flex-wrap gap-1.5 mb-4" aria-label="Recommended platforms">
-          {platforms.map((platform) => {
-            const descriptor = getPlatformDescriptor(platform);
-
-            return (
-              <span
-                key={platform}
-                className={`text-[11px] leading-none px-2 py-1 rounded-md ${descriptor.classes}`}
-              >
-                {descriptor.label}
-              </span>
-            );
-          })}
-        </div>
-      )}
-
       <div className="flex items-center justify-between">
         {/* Category badge - hidden for now, uncomment when we have multiple categories
         <span className="text-xs text-gray-500 bg-clawd-700 px-2 py-1 rounded">

constants.ts

@@ -1,9 +1,7 @@
 
-// Canonical hosted feed endpoint for fetching live advisories
-export const ADVISORY_FEED_URL = 'https://clawsec.prompt.security/advisories/feed.json';
-
-// Compatibility mirror for legacy clients; keep as last-resort fallback only
-export const LEGACY_ADVISORY_FEED_URL = 'https://clawsec.prompt.security/releases/latest/download/feed.json';
+// Feed URL for fetching live advisories
+export const ADVISORY_FEED_URL = 'https://clawsec.prompt.security/releases/latest/download/feed.json';
 
 // Local feed path for development
 export const LOCAL_FEED_PATH = '/advisories/feed.json';
+

eslint.config.js

@@ -28,7 +28,6 @@ export default [
         navigator: 'readonly',
         fetch: 'readonly',
         setTimeout: 'readonly',
-        clearTimeout: 'readonly',
         clearInterval: 'readonly',
         setInterval: 'readonly',
         URL: 'readonly',
@@ -36,13 +35,10 @@ export default [
         HTMLElement: 'readonly',
         MouseEvent: 'readonly',
         KeyboardEvent: 'readonly',
-        // Node.js globals (for Vite config, build scripts, and skill modules)
+        // Node.js globals (for Vite config, build scripts)
         process: 'readonly',
         __dirname: 'readonly',
-        __filename: 'readonly',
-        Buffer: 'readonly',
-        AbortController: 'readonly',
-        RequestInit: 'readonly'
+        __filename: 'readonly'
       }
     },
     plugins: {
@@ -85,8 +81,7 @@ export default [
       }
     },
     rules: {
-      'no-empty': ['error', { allowEmptyCatch: true }],
-      'no-unused-vars': ['error', { argsIgnorePattern: '^_', varsIgnorePattern: '^_' }]
+      'no-empty': ['error', { allowEmptyCatch: true }]
     }
   },
   // Node.js scripts (.js files in scripts directory)
@@ -114,6 +109,6 @@ export default [
     }
   },
   {
-    ignores: ['dist/', 'node_modules/', '*.config.js', 'public/', '.venv/']
+    ignores: ['dist/', 'node_modules/', '*.config.js', 'public/']
   }
 ];

font/README.md

@@ -2,6 +2,6 @@
 
 This repository includes the **Prometo** font files in `font/`.
 
-These font binaries are **not covered by the repository AGPL license**. They are used under the applicable **Adobe Fonts / Dalton Maag** licensing terms for Prompt Security / SentinelOne. Do not redistribute or reuse them outside the terms of that license.
+These font binaries are **not covered by the repository MIT license**. They are used under the applicable **Adobe Fonts / Dalton Maag** licensing terms for Prompt Security / SentinelOne. Do not redistribute or reuse them outside the terms of that license.
 
 If you are forking or redistributing this project and you do not have the appropriate rights, remove `font/Prometo_Trial_*.ttf` and update the CSS/font stack accordingly.

metadata.json

@@ -1,4 +1,4 @@
 {
   "name": "ClawSec",
-  "description": "A security-first skill distribution platform for OpenClaw and NanoClaw agents, featuring verified audit skills, hardening feeds, and guardian mode protocols."
-}
+  "description": "A security-first skill distribution platform for OpenClaw agents (and some clones), featuring verified audit skills, hardening feeds, and guardian mode protocols."
+}

package.json

@@ -1,49 +1,32 @@
 {
   "name": "ClawSec",
   "private": true,
-  "license": "AGPL-3.0-or-later",
+  "license": "MIT",
   "version": "0.0.0",
   "type": "module",
   "scripts": {
-    "gen:wiki-llms": "node scripts/generate-wiki-llms.mjs",
-    "populate-local-wiki": "./scripts/populate-local-wiki.sh",
-    "predev": "npm run gen:wiki-llms",
     "dev": "vite",
-    "prebuild": "npm run gen:wiki-llms",
-    "i18n:qa": "python scripts/i18n/qa_check.py",
-    "i18n:bootstrap:ko": "python scripts/i18n/bootstrap_language_from_en.py --lang ko",
-    "i18n:bootstrap:fr": "python scripts/i18n/bootstrap_language_from_en.py --lang fr",
-    "i18n:bootstrap:de": "python scripts/i18n/bootstrap_language_from_en.py --lang de",
-    "i18n:bootstrap:ja": "python scripts/i18n/bootstrap_language_from_en.py --lang ja",
     "build": "vite build",
     "preview": "vite preview"
   },
   "dependencies": {
-    "lucide-react": "^0.575.0",
+    "lucide-react": "^0.564.0",
     "react": "^19.2.4",
-    "react-dom": "^19.2.5",
+    "react-dom": "^19.2.4",
     "react-markdown": "^10.1.0",
-    "react-router-dom": "^7.16.0",
+    "react-router-dom": "^7.13.0",
     "remark-gfm": "^4.0.1"
   },
   "devDependencies": {
-    "@eslint/js": "~9.39.4",
-    "@types/node": "^25.8.0",
+    "@eslint/js": "~9.28.0",
+    "@types/node": "^22.14.0",
     "@typescript-eslint/eslint-plugin": "^8.55.0",
-    "@typescript-eslint/parser": "^8.58.1",
-    "@vitejs/plugin-react": "^5.1.4",
-    "eslint": "^9.39.4",
+    "@typescript-eslint/parser": "^8.55.0",
+    "@vitejs/plugin-react": "^5.0.0",
+    "eslint": "^9.39.2",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^7.0.1",
-    "fast-check": "^4.7.0",
-    "typescript": "~5.9.3",
-    "vite": "^7.3.2"
-  },
-  "overrides": {
-    "ajv": "6.14.0",
-    "balanced-match": "4.0.3",
-    "brace-expansion": "5.0.6",
-    "minimatch": "10.2.5",
-    "picomatch": "4.0.4"
+    "typescript": "~5.8.2",
+    "vite": "^6.2.0"
   }
 }

pages/AdvisoryDetail.tsx

@@ -1,15 +1,9 @@
 import React, { useState, useEffect } from 'react';
 import { useParams, Link } from 'react-router-dom';
 import { ArrowLeft, ExternalLink, Shield, AlertTriangle, Github, User, Bot } from 'lucide-react';
-import { AdvisoryPlatformBadge } from '../components/AdvisoryPlatformBadge';
 import { Footer } from '../components/Footer';
 import { Advisory, AdvisoryFeed } from '../types';
-import { getPlatformDescriptor } from '../utils/advisoryPlatforms';
-import {
-  ADVISORY_FEED_URL,
-  LEGACY_ADVISORY_FEED_URL,
-  LOCAL_FEED_PATH,
-} from '../constants';
+import { ADVISORY_FEED_URL, LOCAL_FEED_PATH } from '../constants';
 
 export const AdvisoryDetail: React.FC = () => {
   const { advisoryId } = useParams<{ advisoryId: string }>();
@@ -22,17 +16,13 @@ export const AdvisoryDetail: React.FC = () => {
       if (!advisoryId) return;
 
       try {
-        // Try local feed first (dev), then canonical hosted endpoint, then legacy mirror.
+        // Try local feed first (for development), then fall back to GitHub releases
         let response = await fetch(LOCAL_FEED_PATH);
 
         if (!response.ok) {
           response = await fetch(ADVISORY_FEED_URL);
         }
 
-        if (!response.ok) {
-          response = await fetch(LEGACY_ADVISORY_FEED_URL);
-        }
-
         if (!response.ok) {
           throw new Error(`Failed to fetch feed: ${response.status}`);
         }
@@ -156,13 +146,6 @@ export const AdvisoryDetail: React.FC = () => {
           <span className="text-sm text-gray-500">
             Published {formatDate(advisory.published)}
           </span>
-          {advisory.platforms?.map((platform) => (
-            <AdvisoryPlatformBadge
-              key={`${advisory.id}-platform-${platform}`}
-              platform={platform}
-              className="text-xs px-2 py-1 rounded"
-            />
-          ))}
         </div>
 
         <h1 className="text-3xl font-bold text-white">{advisory.id}</h1>
@@ -268,12 +251,6 @@ export const AdvisoryDetail: React.FC = () => {
             <dt className="text-gray-500 mb-1">Published</dt>
             <dd className="text-white">{formatDate(advisory.published)}</dd>
           </div>
-          {advisory.platforms && advisory.platforms.length > 0 && (
-            <div className="flex justify-between md:block">
-              <dt className="text-gray-500 mb-1">Platforms</dt>
-              <dd className="text-white">{advisory.platforms.map((platform) => getPlatformDescriptor(platform).label).join(', ')}</dd>
-            </div>
-          )}
           {/* Reporter info - subtle display for community reports */}
           {advisory.reporter && (
             <>

pages/FeedSetup.tsx

@@ -1,70 +1,19 @@
-import React, { useState, useEffect, useMemo } from 'react';
+import React, { useState, useEffect } from 'react';
 import { Rss, RefreshCw, Loader2, AlertTriangle, ChevronLeft, ChevronRight, Download, Users, AlertCircle } from 'lucide-react';
 import { Link } from 'react-router-dom';
 import { Footer } from '../components/Footer';
 import { AdvisoryCard } from '../components/AdvisoryCard';
-import { Advisory, AdvisoryFeed, AdvisoryPlatformFilter } from '../types';
-import { isCorePlatformSlug, normalizePlatformSlug } from '../utils/advisoryPlatforms';
-import {
-  ADVISORY_FEED_URL,
-  LEGACY_ADVISORY_FEED_URL,
-  LOCAL_FEED_PATH,
-} from '../constants';
+import { Advisory, AdvisoryFeed } from '../types';
+import { ADVISORY_FEED_URL, LOCAL_FEED_PATH } from '../constants';
 
 const ITEMS_PER_PAGE = 9;
 
-type SeverityFilter = 'all' | Advisory['severity'];
-type FilterTabOption<T extends string> = { value: T; label: string; active: string; inactive: string };
-
-const SEVERITY_TABS = [
-  { value: 'all',      label: 'All',      active: 'bg-clawd-accent text-white',                                    inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-clawd-accent/50' },
-  { value: 'critical', label: 'Critical', active: 'bg-red-500/20 text-red-400 border-2 border-red-400',            inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-red-400/50' },
-  { value: 'high',     label: 'High',     active: 'bg-orange-500/20 text-orange-400 border-2 border-orange-400',   inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-orange-400/50' },
-  { value: 'medium',   label: 'Medium',   active: 'bg-yellow-500/20 text-yellow-400 border-2 border-yellow-400',   inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-yellow-400/50' },
-  { value: 'low',      label: 'Low',      active: 'bg-blue-500/20 text-blue-400 border-2 border-blue-400',         inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-blue-400/50' },
-] as const satisfies ReadonlyArray<FilterTabOption<SeverityFilter>>;
-
-const PLATFORM_TABS = [
-  { value: 'all',      label: 'All Platforms', active: 'bg-clawd-accent text-white',                                         inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-clawd-accent/50' },
-  { value: 'openclaw', label: 'OpenClaw',      active: 'bg-clawd-accent/20 text-clawd-accent border-2 border-clawd-accent',  inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-clawd-accent/50' },
-  { value: 'nanoclaw', label: 'NanoClaw',      active: 'bg-clawd-secondary/20 text-clawd-secondary border-2 border-clawd-secondary', inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-clawd-secondary/50' },
-  { value: 'hermes',   label: 'Hermes',        active: 'bg-emerald-500/20 text-emerald-300 border-2 border-emerald-400',      inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-emerald-400/50' },
-  { value: 'picoclaw', label: 'Picoclaw',      active: 'bg-cyan-500/20 text-cyan-300 border-2 border-cyan-400',               inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-cyan-400/50' },
-  { value: 'other',    label: 'Other',         active: 'bg-clawd-600/40 text-gray-100 border-2 border-clawd-500',            inactive: 'bg-clawd-800 text-gray-400 border border-clawd-700 hover:border-clawd-500/50' },
-] as const satisfies ReadonlyArray<FilterTabOption<AdvisoryPlatformFilter>>;
-
-const FilterTabs = <T extends string,>({
-  tabs,
-  selected,
-  onSelect,
-}: {
-  tabs: ReadonlyArray<FilterTabOption<T>>;
-  selected: T;
-  onSelect: (value: T) => void;
-}) => (
-  <div className="flex flex-wrap justify-center gap-3 mb-8">
-    {tabs.map(({ value, label, active, inactive }) => (
-      <button
-        key={value}
-        onClick={() => onSelect(value)}
-        className={`px-4 py-2 rounded-lg text-sm font-semibold transition-all ${
-          selected === value ? active : inactive
-        }`}
-      >
-        {label}
-      </button>
-    ))}
-  </div>
-);
-
 export const FeedSetup: React.FC = () => {
   const [advisories, setAdvisories] = useState<Advisory[]>([]);
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState<string | null>(null);
   const [lastUpdated, setLastUpdated] = useState<string | null>(null);
   const [currentPage, setCurrentPage] = useState(1);
-  const [selectedSeverity, setSelectedSeverity] = useState<SeverityFilter>('all');
-  const [selectedPlatform, setSelectedPlatform] = useState<AdvisoryPlatformFilter>('all');
 
   useEffect(() => {
     const fetchAdvisories = async () => {
@@ -72,17 +21,13 @@ export const FeedSetup: React.FC = () => {
       setError(null);
 
       try {
-        // Try local feed first (dev), then canonical hosted endpoint, then legacy mirror.
+        // Try local feed first (for development), then fall back to GitHub releases
         let response = await fetch(LOCAL_FEED_PATH);
-
+        
         if (!response.ok) {
           response = await fetch(ADVISORY_FEED_URL);
         }
 
-        if (!response.ok) {
-          response = await fetch(LEGACY_ADVISORY_FEED_URL);
-        }
-
         if (!response.ok) {
           throw new Error(`Failed to fetch feed: ${response.status}`);
         }
@@ -102,33 +47,6 @@ export const FeedSetup: React.FC = () => {
     fetchAdvisories();
   }, []);
 
-  const filteredAdvisories = useMemo(
-    () => advisories.filter((a) => {
-      if (selectedSeverity !== 'all' && a.severity !== selectedSeverity) {
-        return false;
-      }
-
-      if (selectedPlatform === 'all') {
-        return true;
-      }
-
-      const advisoryPlatforms = (a.platforms ?? [])
-        .map(normalizePlatformSlug)
-        .filter(Boolean);
-
-      if (selectedPlatform === 'other') {
-        return advisoryPlatforms.some((platform) => !isCorePlatformSlug(platform));
-      }
-
-      return advisoryPlatforms.length === 0 || advisoryPlatforms.includes(selectedPlatform);
-    }),
-    [advisories, selectedSeverity, selectedPlatform],
-  );
-
-  useEffect(() => {
-    setCurrentPage(1);
-  }, [advisories, selectedSeverity, selectedPlatform]);
-
   const formatDate = (dateStr: string) => {
     try {
       return new Date(dateStr).toLocaleDateString('en-US', {
@@ -142,10 +60,10 @@ export const FeedSetup: React.FC = () => {
   };
 
   // Pagination calculations
-  const totalPages = Math.ceil(filteredAdvisories.length / ITEMS_PER_PAGE);
+  const totalPages = Math.ceil(advisories.length / ITEMS_PER_PAGE);
   const startIndex = (currentPage - 1) * ITEMS_PER_PAGE;
   const endIndex = startIndex + ITEMS_PER_PAGE;
-  const currentAdvisories = filteredAdvisories.slice(startIndex, endIndex);
+  const currentAdvisories = advisories.slice(startIndex, endIndex);
 
   const goToPage = (page: number) => {
     setCurrentPage(Math.max(1, Math.min(page, totalPages)));
@@ -158,7 +76,7 @@ export const FeedSetup: React.FC = () => {
         <h1 className="text-3xl md:text-4xl text-white">Security Hardening Feed</h1>
         <p className="text-gray-400 max-w-2xl mx-auto">
           A continuous stream of security advisories from NVD CVE data and staff-approved community reports. 
-          This feed is automatically updated with OpenClaw, NanoClaw, Hermes, and Picoclaw-related vulnerabilities and verified security incidents.
+          This feed is automatically updated with OpenClaw-related vulnerabilities and verified security incidents.
         </p>
         {lastUpdated && (
           <p className="text-xs text-gray-500">
@@ -168,17 +86,6 @@ export const FeedSetup: React.FC = () => {
       </section>
 
       <section>
-        <FilterTabs
-          tabs={SEVERITY_TABS}
-          selected={selectedSeverity}
-          onSelect={(value) => setSelectedSeverity(value as SeverityFilter)}
-        />
-        <FilterTabs
-          tabs={PLATFORM_TABS}
-          selected={selectedPlatform}
-          onSelect={(value) => setSelectedPlatform(value as AdvisoryPlatformFilter)}
-        />
-
         {loading ? (
           <div className="flex items-center justify-center py-12">
             <Loader2 className="w-8 h-8 text-clawd-accent animate-spin" />
@@ -189,13 +96,9 @@ export const FeedSetup: React.FC = () => {
             <AlertTriangle className="w-6 h-6 text-orange-400 mr-2" />
             <span className="text-gray-400">{error}</span>
           </div>
-        ) : filteredAdvisories.length === 0 ? (
+        ) : advisories.length === 0 ? (
           <div className="text-center py-12">
-            <p className="text-gray-400">
-              {advisories.length === 0
-                ? 'No security advisories at this time. Check back later.'
-                : 'No advisories found for the selected filters.'}
-            </p>
+            <p className="text-gray-400">No security advisories at this time. Check back later.</p>
           </div>
         ) : (
           <>
@@ -230,10 +133,9 @@ export const FeedSetup: React.FC = () => {
               </div>
             )}
 
-            {filteredAdvisories.length > 0 && (
+            {advisories.length > 0 && (
               <p className="text-center text-sm text-gray-500 mt-4">
-                Showing {startIndex + 1}-{Math.min(endIndex, filteredAdvisories.length)} of {filteredAdvisories.length} advisories
-                {(selectedSeverity !== 'all' || selectedPlatform !== 'all') && ` (${advisories.length} total)`}
+                Showing {startIndex + 1}-{Math.min(endIndex, advisories.length)} of {advisories.length} advisories
               </p>
             )}
           </>

pages/Home.tsx

@@ -1,17 +1,14 @@
 import React, { useState, useEffect } from 'react';
-import { User, Bot, Copy, Check, Lock } from 'lucide-react';
+import { User, Bot, Copy, Check } from 'lucide-react';
 import { Footer } from '../components/Footer';
 
 const FILE_NAMES = ['SOUL.md', 'AGENTS.md', 'USER.md', 'TOOLS.md', 'IDENTITY.md', 'HEARTBEAT.md', 'MEMORY.md'];
-const PLATFORM_NAMES = ['OpenClaw', 'NanoClaw', 'Hermes'];
-const FILE_LOCK_REVEAL_DELAY_MS = 1600;
 
 export const Home: React.FC = () => {
   const [isAgent, setIsAgent] = useState(true);
   const [copiedCurl, setCopiedCurl] = useState(false);
   const [copiedHuman, setCopiedHuman] = useState(false);
   const [currentFileIndex, setCurrentFileIndex] = useState(0);
-  const [currentPlatformIndex, setCurrentPlatformIndex] = useState(0);
 
   const curlCommand = `npx clawhub@latest install clawsec-suite`;
 
@@ -23,27 +20,6 @@ export const Home: React.FC = () => {
     return () => clearInterval(interval);
   }, []);
 
-  // Rotate platform names every 4-6 seconds
-  useEffect(() => {
-    let timeoutId: number | undefined;
-
-    const scheduleNextRotation = () => {
-      const delay = 4000 + Math.floor(Math.random() * 2001);
-      timeoutId = window.setTimeout(() => {
-        setCurrentPlatformIndex((prev) => (prev + 1) % PLATFORM_NAMES.length);
-        scheduleNextRotation();
-      }, delay);
-    };
-
-    scheduleNextRotation();
-
-    return () => {
-      if (timeoutId !== undefined) {
-        window.clearTimeout(timeoutId);
-      }
-    };
-  }, []);
-
   const humanInstruction = `Please install clawsec-suite from clawhubnpx clawhub@latest install clawsec-suite`;
 
   const handleCopyCurl = () => {
@@ -68,20 +44,24 @@ export const Home: React.FC = () => {
       {/* Hero Section */}
       <section className="text-center space-y-6 max-w-3xl mx-auto mb-12 md:mb-16">
         <h2 className="text-3xl md:text-4xl tracking-tight text-white">
-          Secure your{' '}
+          Secure your <span className="text-clawd-accent">OpenClaw</span> agents
+        </h2>
+        <p className="text-lg md:text-xl text-gray-400 leading-relaxed">
+          A complete security skill suite for OpenClaw's family of agents. Protect your{' '}
           <code
-            key={currentPlatformIndex}
-            className="px-2 py-1 rounded text-clawd-accent inline-block align-baseline relative"
+            key={currentFileIndex}
+            className="px-2 py-1 rounded text-clawd-accent inline-block align-baseline relative text-base"
             style={{
-              minWidth: '9ch',
+              width: '165px',
               textAlign: 'center',
+              verticalAlign: 'baseline',
               backgroundColor: 'rgb(30 27 75 / 1)',
               animation: 'bgFade 0.4s ease-out 1.2s 1 forwards'
             }}
           >
-            {PLATFORM_NAMES[currentPlatformIndex].split('').map((char, index) => (
+            {FILE_NAMES[currentFileIndex].split('').map((char, index) => (
               <span
-                key={`platform-${currentPlatformIndex}-${index}`}
+                key={`${currentFileIndex}-${index}`}
                 className="inline-block"
                 style={{
                   animation: `flipChar 0.3s ease-in-out ${index * 0.05}s 1 forwards`,
@@ -93,47 +73,6 @@ export const Home: React.FC = () => {
                 {char}
               </span>
             ))}
-          </code>{' '}
-          agents
-        </h2>
-        <p className="text-lg md:text-xl text-gray-400 leading-relaxed">
-          A complete security skill suite for OpenClaw, NanoClaw, and Hermes agents. Protect your{' '}
-          <code
-            key={currentFileIndex}
-            className="px-2 py-1 rounded text-clawd-accent inline-block align-baseline relative text-base"
-            style={{
-              width: '188px',
-              textAlign: 'center',
-              verticalAlign: 'baseline',
-              backgroundColor: 'rgb(30 27 75 / 1)',
-              animation: 'bgFade 0.4s ease-out 1.2s 1 forwards'
-            }}
-          >
-            <span className="inline-block w-full pr-5">
-              {FILE_NAMES[currentFileIndex].split('').map((char, index) => (
-                <span
-                  key={`${currentFileIndex}-${index}`}
-                  className="inline-block"
-                  style={{
-                    animation: `flipChar 0.3s ease-in-out ${index * 0.05}s 1 forwards`,
-                    transformStyle: 'preserve-3d',
-                    perspective: '400px',
-                    opacity: 0
-                  }}
-                >
-                  {char}
-                </span>
-              ))}
-            </span>
-            <Lock
-              size={14}
-              className="text-clawd-accent absolute right-2 top-1/2 -translate-y-1/2"
-              style={{
-                opacity: 0,
-                animation: `lockReveal ${FILE_LOCK_REVEAL_DELAY_MS}ms steps(1, end) 1 forwards`
-              }}
-              aria-hidden="true"
-            />
           </code>
           {' '}with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.
         </p>
@@ -163,14 +102,6 @@ export const Home: React.FC = () => {
               background-color: rgb(191 107 42 / 0.15);
             }
           }
-          @keyframes lockReveal {
-            0% {
-              opacity: 0;
-            }
-            100% {
-              opacity: 0.85;
-            }
-          }
           @keyframes mascotHover {
             0%, 100% { transform: translateY(0); }
             50% { transform: translateY(-12px); }

pages/ProductDemo.tsx

@@ -1,92 +0,0 @@
-import React from 'react';
-import { ExternalLink, PlayCircle } from 'lucide-react';
-import { Footer } from '../components/Footer';
-
-interface DemoVideo {
-  id: string;
-  title: string;
-  description: string;
-  videoSrc: string;
-  posterSrc: string;
-  videoContainerClassName?: string;
-}
-
-const demoVideos: DemoVideo[] = [
-  {
-    id: 'drift-demo',
-    title: 'Drift Detection Demo (soul-guardian)',
-    description:
-      'Shows integrity monitoring in action: tamper detection, alerting, and restoration-oriented behavior for protected files.',
-    videoSrc: '/video/soul-guardian-demo.mp4',
-    posterSrc: '/video/soul-guardian-demo-poster.jpg',
-  },
-  {
-    id: 'install-demo',
-    title: 'Install Demo (clawsec-suite)',
-    description:
-      'Walkthrough of the one-command suite install flow and what gets configured for advisory monitoring and protection.',
-    videoSrc: '/video/install-demo.mp4',
-    posterSrc: '/video/install-demo-poster.jpg',
-    videoContainerClassName: 'md:max-w-[50%]',
-  },
-];
-
-export const ProductDemo: React.FC = () => {
-  return (
-    <div className="max-w-5xl mx-auto pt-[52px] space-y-10">
-      <section className="text-center space-y-4">
-        <h1 className="text-3xl md:text-4xl text-white flex items-center justify-center gap-3">
-          <PlayCircle className="text-clawd-accent" />
-          Watch It in Action
-        </h1>
-        <p className="text-gray-400 max-w-3xl mx-auto">
-          Product demos for ClawSec installation and runtime protection behavior. These are the
-          same demo assets referenced in the repository README, presented as playable videos.
-        </p>
-      </section>
-
-      <section className="space-y-8">
-        {demoVideos.map((demo) => (
-          <article
-            key={demo.id}
-            className="bg-clawd-900 border border-clawd-700 rounded-xl overflow-hidden"
-          >
-            <div className="px-6 pt-6 pb-4 space-y-3">
-              <h2 className="text-xl text-white">{demo.title}</h2>
-              <p className="text-gray-400">{demo.description}</p>
-            </div>
-            <div className="px-6 pb-6 space-y-4">
-              <div
-                className={`rounded-lg overflow-hidden border border-clawd-700 bg-black ${
-                  demo.videoContainerClassName ?? ''
-                }`}
-              >
-                <video
-                  className="w-full h-auto"
-                  controls
-                  playsInline
-                  preload="metadata"
-                  poster={demo.posterSrc}
-                >
-                  <source src={demo.videoSrc} type="video/mp4" />
-                  Your browser does not support the video tag.
-                </video>
-              </div>
-              <a
-                href={demo.videoSrc}
-                target="_blank"
-                rel="noopener noreferrer"
-                className="inline-flex items-center gap-2 text-sm text-clawd-accent hover:underline"
-              >
-                <ExternalLink size={15} />
-                Open video in new tab
-              </a>
-            </div>
-          </article>
-        ))}
-      </section>
-
-      <Footer />
-    </div>
-  );
-};

pages/SkillDetail.tsx

@@ -5,16 +5,11 @@ import Markdown from 'react-markdown';
 import remarkGfm from 'remark-gfm';
 import { Footer } from '../components/Footer';
 import type { SkillJson, SkillChecksums } from '../types';
-import { getPlatformDescriptor } from '../utils/advisoryPlatforms';
-import { defaultMarkdownComponents } from '../utils/markdownComponents';
-import { stripFrontmatter } from '../utils/markdownHelpers.mjs';
-import { getRecommendedSkillPlatforms, resolveSkillPlatformMetadata } from '../utils/skillPlatforms';
 
-const RELEASE_REPO_URL = 'https://github.com/prompt-security/clawsec';
-
-const isProbablyHtmlDocument = (text: string): boolean => {
-  const start = text.trimStart().slice(0, 200).toLowerCase();
-  return start.startsWith('<!doctype html') || start.startsWith('<html');
+// Strip YAML frontmatter from markdown content
+const stripFrontmatter = (content: string): string => {
+  const frontmatterRegex = /^---\s*\n[\s\S]*?\n---\s*\n/;
+  return content.replace(frontmatterRegex, '');
 };
 
 export const SkillDetail: React.FC = () => {
@@ -34,44 +29,19 @@ export const SkillDetail: React.FC = () => {
         setDoc(null);
 
         // Fetch skill.json
-        const skillResponse = await fetch(`/skills/${skillId}/skill.json`, {
-          headers: { Accept: 'application/json' }
-        });
+        const skillResponse = await fetch(`./skills/${skillId}/skill.json`);
         if (!skillResponse.ok) {
           throw new Error('Skill not found');
         }
-
-        const skillContentType = skillResponse.headers.get('content-type') ?? '';
-        const skillRaw = await skillResponse.text();
-        if (skillContentType.includes('text/html') || isProbablyHtmlDocument(skillRaw)) {
-          throw new Error('Skill not found');
-        }
-
-        let skill: SkillJson;
-        try {
-          skill = JSON.parse(skillRaw) as SkillJson;
-        } catch {
-          throw new Error('Invalid skill metadata');
-        }
-
+        const skill = await skillResponse.json();
         setSkillData(skill);
 
         // Fetch checksums.json
         try {
-          const checksumsResponse = await fetch(`/skills/${skillId}/checksums.json`, {
-            headers: { Accept: 'application/json' }
-          });
+          const checksumsResponse = await fetch(`./skills/${skillId}/checksums.json`);
           if (checksumsResponse.ok) {
-            const checksumsContentType = checksumsResponse.headers.get('content-type') ?? '';
-            const checksumsRaw = await checksumsResponse.text();
-            if (!checksumsContentType.includes('text/html') && !isProbablyHtmlDocument(checksumsRaw)) {
-              try {
-                const checksumsData = JSON.parse(checksumsRaw) as SkillChecksums;
-                setChecksums(checksumsData);
-              } catch {
-                // Checksums malformed, ignore.
-              }
-            }
+            const checksumsData = await checksumsResponse.json();
+            setChecksums(checksumsData);
           }
         } catch {
           // Checksums not available
@@ -81,8 +51,18 @@ export const SkillDetail: React.FC = () => {
         // Note: Dev servers may fall back to serving index.html with 200 for missing files;
         // guard against accidentally rendering HTML as docs.
         try {
+          const isProbablyHtmlDocument = (text: string) => {
+            const start = text.trimStart().slice(0, 200).toLowerCase();
+            return start.startsWith('<!doctype html') || start.startsWith('<html');
+          };
+
+          const stripYamlFrontmatter = (text: string) => {
+            const match = text.match(/^---\\s*\\n[\\s\\S]*?\\n---\\s*\\n/);
+            return match ? text.slice(match[0].length) : text;
+          };
+
           const fetchDocFile = async (filename: string) => {
-            const response = await fetch(`/skills/${skillId}/${filename}`, {
+            const response = await fetch(`./skills/${skillId}/${filename}`, {
               headers: { Accept: 'text/plain' }
             });
             if (!response.ok) return null;
@@ -93,7 +73,7 @@ export const SkillDetail: React.FC = () => {
             if (contentType.includes('text/html') || isProbablyHtmlDocument(rawText)) return null;
 
             const text =
-              filename === 'SKILL.md' ? stripFrontmatter(rawText).trim() : rawText.trim();
+              filename === 'SKILL.md' ? stripYamlFrontmatter(rawText).trim() : rawText.trim();
 
             return text.length > 0 ? text : null;
           };
@@ -125,29 +105,10 @@ export const SkillDetail: React.FC = () => {
     setTimeout(() => setCopied(null), 2000);
   };
 
-  const releaseTag = skillData ? `${skillData.name}-v${skillData.version}` : '';
-  const skillInstructionsUrl = releaseTag
-    ? `${RELEASE_REPO_URL}/releases/download/${releaseTag}/SKILL.md`
-    : '';
-
-  const recommendedPlatforms = useMemo(
-    () => (skillData ? getRecommendedSkillPlatforms(skillData) : []),
-    [skillData]
-  );
-
-  const isOpenClawSkill = recommendedPlatforms.includes('openclaw');
-
   const installCommand = skillData
-    ? isOpenClawSkill
-      ? `npx clawhub@latest install ${skillData.name}`
-      : `curl -sLO ${skillInstructionsUrl}`
+    ? `npx clawhub@latest install ${skillData.name}`
     : '';
 
-  const installLabel = isOpenClawSkill ? 'Via ClawHub' : 'Via SKILL.md instructions';
-  const installHelp = isOpenClawSkill
-    ? 'Recommended for OpenClaw-compatible skills.'
-    : 'Pull the published instruction file and follow the platform-specific setup steps.';
-
   const releasePageUrl = useMemo(() => {
     if (!skillData) return '';
 
@@ -157,7 +118,7 @@ export const SkillDetail: React.FC = () => {
         const [owner, repo] = url.pathname.split('/').filter(Boolean);
         if (owner && repo) {
           const repoBase = `${url.origin}/${owner}/${repo.replace(/\\.git$/, '')}`;
-          return `${repoBase}/releases/tag/${releaseTag}`;
+          return `${repoBase}/releases/tag/${skillData.name}-v${skillData.version}`;
         }
       }
     } catch {
@@ -165,17 +126,7 @@ export const SkillDetail: React.FC = () => {
     }
 
     return skillData.homepage;
-  }, [releaseTag, skillData]);
-
-  const platformMetadata = useMemo(
-    () => (skillData ? resolveSkillPlatformMetadata(skillData) : null),
-    [skillData]
-  );
-
-  const triggers = useMemo(() => {
-    if (!platformMetadata || !Array.isArray(platformMetadata.triggers)) return [];
-    return platformMetadata.triggers;
-  }, [platformMetadata]);
+  }, [skillData]);
 
   if (loading) {
     return (
@@ -213,26 +164,14 @@ export const SkillDetail: React.FC = () => {
       {/* Header */}
       <section className="flex flex-col md:flex-row md:items-start md:justify-between gap-6">
         <div className="flex items-start gap-4">
-          <span className="text-4xl">{platformMetadata?.emoji || '📦'}</span>
+          <span className="text-4xl">{skillData.openclaw?.emoji || '📦'}</span>
           <div>
             <h1 className="text-3xl font-bold text-white mb-1">{skillData.name}</h1>
             <div className="flex items-center gap-3 text-sm">
               <span className="text-gray-500 font-mono">v{skillData.version}</span>
-              {recommendedPlatforms.slice(0, 4).map((platform) => {
-                const descriptor = getPlatformDescriptor(platform);
-
-                return (
-                  <span
-                    key={platform}
-                    className={`text-xs px-2 py-0.5 rounded-md ${descriptor.classes}`}
-                  >
-                    {descriptor.label}
-                  </span>
-                );
-              })}
               {/* Category badge - hidden for now, uncomment when we have multiple categories
               <span className="text-gray-500 bg-clawd-800 px-2 py-0.5 rounded">
-                {platformMetadata?.category || 'utility'}
+                {skillData.openclaw?.category || 'utility'}
               </span>
               */}
             </div>
@@ -263,10 +202,6 @@ export const SkillDetail: React.FC = () => {
           <Download size={20} />
           Quick Install
         </h2>
-        <div>
-          <p className="text-sm font-medium text-white">{installLabel}</p>
-          <p className="text-sm text-gray-400">{installHelp}</p>
-        </div>
         <div className="bg-clawd-800 rounded-lg p-3 sm:p-4 flex items-center justify-between gap-2 sm:gap-4">
           <code className="text-gray-200 font-mono text-xs sm:text-sm overflow-x-auto break-all min-w-0 flex-1">
             {installCommand}
@@ -365,7 +300,102 @@ export const SkillDetail: React.FC = () => {
           <div className="skill-docs bg-clawd-800/50 border border-clawd-700 rounded-xl p-4 sm:p-6 md:p-8 overflow-x-hidden">
             <Markdown
               remarkPlugins={[remarkGfm]}
-              components={defaultMarkdownComponents}
+              components={{
+                h1: ({ children }) => (
+                  <h1 className="text-2xl font-bold text-white border-b border-clawd-700 pb-3 mb-6 mt-0">
+                    {children}
+                  </h1>
+                ),
+                h2: ({ children }) => (
+                  <h2 className="text-xl font-bold text-white mt-8 mb-4">{children}</h2>
+                ),
+                h3: ({ children }) => (
+                  <h3 className="text-lg font-semibold text-white mt-6 mb-3">{children}</h3>
+                ),
+                h4: ({ children }) => (
+                  <h4 className="text-base font-semibold text-white mt-4 mb-2">{children}</h4>
+                ),
+                p: ({ children }) => (
+                  <p className="text-gray-300 leading-relaxed mb-4">{children}</p>
+                ),
+                a: ({ href, children }) => (
+                  <a
+                    href={href}
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    className="text-clawd-accent hover:underline"
+                  >
+                    {children}
+                  </a>
+                ),
+                ul: ({ children }) => (
+                  <ul className="list-disc list-inside text-gray-300 space-y-2 mb-4 ml-4">
+                    {children}
+                  </ul>
+                ),
+                ol: ({ children }) => (
+                  <ol className="list-decimal list-inside text-gray-300 space-y-2 mb-4 ml-4">
+                    {children}
+                  </ol>
+                ),
+                li: ({ children }) => (
+                  <li className="text-gray-300">{children}</li>
+                ),
+                blockquote: ({ children }) => (
+                  <blockquote className="border-l-4 border-clawd-accent pl-4 py-2 my-4 bg-clawd-900/50 rounded-r text-gray-400 italic">
+                    {children}
+                  </blockquote>
+                ),
+                code: ({ className, children }) => {
+                  const isInline = !className;
+                  if (isInline) {
+                    return (
+                      <code className="text-orange-300 bg-clawd-900 px-1.5 py-0.5 rounded text-sm font-mono">
+                        {children}
+                      </code>
+                    );
+                  }
+                  return (
+                    <code className="text-gray-200 text-sm font-mono">{children}</code>
+                  );
+                },
+                pre: ({ children }) => (
+                  <pre className="bg-clawd-900 border border-clawd-700 rounded-lg p-3 sm:p-4 overflow-x-auto mb-4 text-xs sm:text-sm max-w-full">
+                    {children}
+                  </pre>
+                ),
+                table: ({ children }) => (
+                  <div className="overflow-x-auto mb-6 -mx-4 sm:mx-0 px-4 sm:px-0">
+                    <table className="w-full border-collapse text-xs sm:text-sm min-w-[300px]">
+                      {children}
+                    </table>
+                  </div>
+                ),
+                thead: ({ children }) => (
+                  <thead className="bg-clawd-900 border-b border-clawd-600">
+                    {children}
+                  </thead>
+                ),
+                tbody: ({ children }) => <tbody>{children}</tbody>,
+                tr: ({ children }) => (
+                  <tr className="border-b border-clawd-700/50">{children}</tr>
+                ),
+                th: ({ children }) => (
+                  <th className="text-left px-4 py-3 text-gray-300 font-semibold">
+                    {children}
+                  </th>
+                ),
+                td: ({ children }) => (
+                  <td className="px-4 py-3 text-gray-300">{children}</td>
+                ),
+                hr: () => <hr className="border-clawd-700 my-6" />,
+                strong: ({ children }) => (
+                  <strong className="text-white font-semibold">{children}</strong>
+                ),
+                em: ({ children }) => (
+                  <em className="text-gray-200">{children}</em>
+                ),
+              }}
             >
               {stripFrontmatter(doc.content)}
             </Markdown>
@@ -388,16 +418,16 @@ export const SkillDetail: React.FC = () => {
             </div>
             <div className="flex justify-between">
               <dt className="text-gray-500">Category</dt>
-              <dd className="text-white">{platformMetadata?.category || 'utility'}</dd>
+              <dd className="text-white">{skillData.openclaw?.category}</dd>
             </div>
           </dl>
         </div>
 
-        {triggers.length > 0 && (
+        {skillData.openclaw?.triggers && skillData.openclaw.triggers.length > 0 && (
           <div className="bg-clawd-800/50 border border-clawd-700 rounded-xl p-6 space-y-4">
             <h3 className="font-bold text-white">Trigger Phrases</h3>
             <div className="flex flex-wrap gap-2">
-              {triggers.slice(0, 8).map((trigger) => (
+              {skillData.openclaw.triggers.slice(0, 8).map((trigger) => (
                 <span
                   key={trigger}
                   className="text-xs bg-clawd-700 text-gray-300 px-2 py-1 rounded"

pages/SkillsCatalog.tsx

@@ -4,27 +4,6 @@ import { SkillCard } from '../components/SkillCard';
 import { Footer } from '../components/Footer';
 import type { SkillMetadata, SkillsIndex } from '../types';
 
-const SKILLS_INDEX_PATH = '/skills/index.json';
-
-const isProbablyHtmlDocument = (text: string): boolean => {
-  const start = text.trimStart().slice(0, 200).toLowerCase();
-  return start.startsWith('<!doctype html') || start.startsWith('<html');
-};
-
-const parseSkillsIndex = (raw: string): SkillsIndex | null => {
-  try {
-    const parsed = JSON.parse(raw) as Partial<SkillsIndex> | null;
-    if (!parsed || !Array.isArray(parsed.skills)) return null;
-    return {
-      version: typeof parsed.version === 'string' ? parsed.version : '1.0.0',
-      updated: typeof parsed.updated === 'string' ? parsed.updated : '',
-      skills: parsed.skills as SkillMetadata[],
-    };
-  } catch {
-    return null;
-  }
-};
-
 export const SkillsCatalog: React.FC = () => {
   const [skills, setSkills] = useState<SkillMetadata[]>([]);
   const [filteredSkills, setFilteredSkills] = useState<SkillMetadata[]>([]);
@@ -36,41 +15,15 @@ export const SkillsCatalog: React.FC = () => {
   useEffect(() => {
     const fetchSkills = async () => {
       try {
-        const response = await fetch(SKILLS_INDEX_PATH, {
-          headers: { Accept: 'application/json' },
-        });
-
-        // Missing index file is a valid "empty catalog" state.
-        if (response.status === 404) {
-          setSkills([]);
-          setFilteredSkills([]);
-          return;
-        }
-
+        const response = await fetch('./skills/index.json');
         if (!response.ok) {
           throw new Error('Failed to fetch skills index');
         }
-
-        const contentType = response.headers.get('content-type') ?? '';
-        const raw = await response.text();
-
-        // Some SPA setups return index.html with 200 for missing JSON files.
-        if (!raw.trim() || contentType.includes('text/html') || isProbablyHtmlDocument(raw)) {
-          setSkills([]);
-          setFilteredSkills([]);
-          return;
-        }
-
-        const data = parseSkillsIndex(raw);
-        if (!data) {
-          throw new Error('Invalid skills index format');
-        }
-
-        setSkills(data.skills);
-        setFilteredSkills(data.skills);
+        const data: SkillsIndex = await response.json();
+        setSkills(data.skills || []);
+        setFilteredSkills(data.skills || []);
       } catch (err) {
-        console.error('Failed to load skills index:', err);
-        setError('Failed to load skills catalog');
+        setError(err instanceof Error ? err.message : 'Failed to load skills');
       } finally {
         setLoading(false);
       }

pages/WikiBrowser.tsx

@@ -1,457 +0,0 @@
-import React, { useMemo } from 'react';
-import { BookOpenText, ExternalLink, FileText } from 'lucide-react';
-import { Link, useParams } from 'react-router-dom';
-import Markdown from 'react-markdown';
-import type { Components } from 'react-markdown';
-import remarkGfm from 'remark-gfm';
-import { Footer } from '../components/Footer';
-import { defaultMarkdownComponents } from '../utils/markdownComponents';
-import {
-  extractTitleFromMarkdown,
-  fallbackTitleFromPath,
-  stripFrontmatter,
-} from '../utils/markdownHelpers.mjs';
-import {
-  isWikiIndexSlug,
-  toWikiLlmsPath,
-  toWikiRoute,
-} from '../utils/wikiPathHelpers.mjs';
-
-interface WikiDoc {
-  filePath: string;
-  slug: string;
-  title: string;
-  content: string;
-}
-
-const normalizePath = (path: string): string => {
-  const clean = path.replace(/\\/g, '/');
-  const parts: string[] = [];
-  for (const part of clean.split('/')) {
-    if (!part || part === '.') continue;
-    if (part === '..') {
-      if (parts.length > 0) parts.pop();
-      continue;
-    }
-    parts.push(part);
-  }
-  return parts.join('/');
-};
-
-const dirname = (path: string): string => {
-  const idx = path.lastIndexOf('/');
-  return idx === -1 ? '' : path.slice(0, idx);
-};
-
-const resolveFromFile = (currentFilePath: string, targetPath: string): string => {
-  if (!targetPath) return currentFilePath;
-  if (targetPath.startsWith('/')) return normalizePath(targetPath.slice(1));
-  const baseDir = dirname(currentFilePath);
-  const joined = baseDir ? `${baseDir}/${targetPath}` : targetPath;
-  return normalizePath(joined);
-};
-
-const splitHash = (href: string): { path: string; hash: string } => {
-  const idx = href.indexOf('#');
-  if (idx === -1) return { path: href, hash: '' };
-  return { path: href.slice(0, idx), hash: href.slice(idx) };
-};
-
-const toWikiRelativePath = (globPath: string): string =>
-  globPath.replace(/^\.\.\/wiki\//, '').replace(/\\/g, '/');
-
-const isExternalHref = (href: string): boolean =>
-  /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(href) || href.startsWith('//');
-
-const ALLOWED_LINK_SCHEMES = new Set(['http:', 'https:', 'mailto:', 'tel:']);
-const ALLOWED_IMAGE_SCHEMES = new Set(['http:', 'https:']);
-
-const sanitizeHref = (href: string): string | null => {
-  const trimmed = href.trim();
-  if (!trimmed) return null;
-  if (trimmed.startsWith('//')) return null;
-
-  const schemeMatch = trimmed.match(/^([a-zA-Z][a-zA-Z0-9+.-]*:)/);
-  if (!schemeMatch) return trimmed;
-
-  return ALLOWED_LINK_SCHEMES.has(schemeMatch[1].toLowerCase()) ? trimmed : null;
-};
-
-const sanitizeImageSrc = (src: string): string | null => {
-  const trimmed = src.trim();
-  if (!trimmed) return null;
-  if (trimmed.startsWith('//')) return null;
-
-  const schemeMatch = trimmed.match(/^([a-zA-Z][a-zA-Z0-9+.-]*:)/);
-  if (!schemeMatch) return trimmed;
-
-  return ALLOWED_IMAGE_SCHEMES.has(schemeMatch[1].toLowerCase()) ? trimmed : null;
-};
-
-const markdownModules = import.meta.glob('../wiki/**/*.md', {
-  eager: true,
-  query: '?raw',
-  import: 'default',
-}) as Record<string, string>;
-
-const assetModules = import.meta.glob('../wiki/**/*.{png,jpg,jpeg,gif,svg,webp,avif}', {
-  eager: true,
-  import: 'default',
-}) as Record<string, string>;
-
-const wikiDocs: WikiDoc[] = Object.entries(markdownModules)
-  .map(([globPath, content]) => {
-    const filePath = toWikiRelativePath(globPath);
-    return {
-      filePath,
-      slug: filePath.replace(/\.md$/i, ''),
-      title: extractTitleFromMarkdown(content, filePath),
-      content: stripFrontmatter(content).trim(),
-    };
-  })
-  .sort((a, b) => {
-    const aIndex = a.slug.toLowerCase() === 'index';
-    const bIndex = b.slug.toLowerCase() === 'index';
-    if (aIndex && !bIndex) return -1;
-    if (!aIndex && bIndex) return 1;
-
-    const aModule = a.filePath.startsWith('modules/');
-    const bModule = b.filePath.startsWith('modules/');
-    if (aModule !== bModule) return aModule ? 1 : -1;
-
-    return a.title.localeCompare(b.title, 'en', { sensitivity: 'base' });
-  });
-
-const wikiDocBySlug = new Map<string, WikiDoc>(
-  wikiDocs.map((doc) => [doc.slug.toLowerCase(), doc]),
-);
-
-const wikiDocByFilePath = new Map<string, WikiDoc>(
-  wikiDocs.map((doc) => [doc.filePath.toLowerCase(), doc]),
-);
-
-const wikiAssetByPath = new Map<string, string>(
-  Object.entries(assetModules).map(([globPath, assetUrl]) => [
-    toWikiRelativePath(globPath).toLowerCase(),
-    assetUrl,
-  ]),
-);
-
-const defaultDoc = wikiDocBySlug.get('index') ?? wikiDocs[0] ?? null;
-
-const languageLabelByCode: Record<string, string> = {
-  en: 'English',
-  es: 'Español',
-  ko: '한국어',
-  fr: 'Français',
-  de: 'Deutsch',
-  ja: '日本語',
-};
-
-const languageIndexByCode = new Map<string, WikiDoc>(
-  wikiDocs
-    .map((doc) => {
-      const match = doc.slug.match(/^([^/]+)\/index$/i);
-      if (!match) return null;
-      const code = match[1].toLowerCase();
-      return [code, doc] as const;
-    })
-    .filter((entry): entry is readonly [string, WikiDoc] => entry !== null),
-);
-
-const toGroupName = (filePath: string): string => {
-  if (!filePath.includes('/')) return 'Core';
-  if (filePath.startsWith('modules/')) return 'Modules';
-  const [firstSegment] = filePath.split('/');
-  return fallbackTitleFromPath(firstSegment);
-};
-
-export const WikiBrowser: React.FC = () => {
-  const params = useParams<{ '*': string }>();
-  const wildcard = params['*'] ?? '';
-  const normalizedWildcard = wildcard.replace(/^\/+|\/+$/g, '');
-  let requested = '';
-  let decodeFailed = false;
-  try {
-    requested = decodeURIComponent(normalizedWildcard);
-  } catch (error) {
-    decodeFailed = normalizedWildcard.length > 0;
-    console.warn('Failed to decode wiki route segment', { wildcard, error });
-    requested = '';
-  }
-  const requestedSlug = requested || 'INDEX';
-  const requestedSlugLower = requestedSlug.toLowerCase();
-  const languageIndexFallback = languageIndexByCode.get(requestedSlugLower);
-
-  const selectedDoc =
-    wikiDocBySlug.get(requestedSlugLower) ??
-    languageIndexFallback ??
-    defaultDoc;
-  const notFound =
-    (decodeFailed && normalizedWildcard.length > 0) ||
-    (requested.length > 0 && !wikiDocBySlug.has(requestedSlugLower) && !languageIndexFallback);
-
-  const groupedDocs = useMemo(() => {
-    const map = new Map<string, WikiDoc[]>();
-    for (const doc of wikiDocs) {
-      const group = toGroupName(doc.filePath);
-      const existing = map.get(group) ?? [];
-      existing.push(doc);
-      map.set(group, existing);
-    }
-
-    const preferredOrder = ['Core', 'Modules'];
-    return Array.from(map.entries())
-      .sort(([a], [b]) => {
-        const idxA = preferredOrder.indexOf(a);
-        const idxB = preferredOrder.indexOf(b);
-        if (idxA !== -1 || idxB !== -1) {
-          if (idxA === -1) return 1;
-          if (idxB === -1) return -1;
-          return idxA - idxB;
-        }
-        return a.localeCompare(b, 'en', { sensitivity: 'base' });
-      })
-      .map(([name, docs]) => ({
-        name,
-        docs: docs.sort((a, b) =>
-          a.title.localeCompare(b.title, 'en', { sensitivity: 'base' }),
-        ),
-      }));
-  }, []);
-
-  if (!selectedDoc) {
-    return (
-      <div className="pt-[52px] py-20 text-center space-y-4">
-        <BookOpenText className="w-12 h-12 text-gray-500 mx-auto" />
-        <h1 className="text-2xl text-white">Wiki unavailable</h1>
-        <p className="text-gray-400">No markdown files were found in the wiki source.</p>
-      </div>
-    );
-  }
-
-  const activeSlug = selectedDoc.slug.toLowerCase();
-  const pageLlmsPath = toWikiLlmsPath(activeSlug);
-  const showWikiLlmsIndexLink = !isWikiIndexSlug(activeSlug);
-
-  const localizedPrefix = Array.from(languageIndexByCode.keys()).find((code) =>
-    activeSlug.startsWith(`${code}/`),
-  );
-  const currentLanguageCode = localizedPrefix ?? 'en';
-  const activeBaseSlug = localizedPrefix
-    ? activeSlug.slice(localizedPrefix.length + 1)
-    : activeSlug;
-
-  const languageOptions = [
-    { code: 'en', label: languageLabelByCode.en ?? 'English' },
-    ...Array.from(languageIndexByCode.keys())
-      .sort((a, b) => a.localeCompare(b, 'en', { sensitivity: 'base' }))
-      .map((code) => ({
-        code,
-        label: languageLabelByCode[code] ?? code.toUpperCase(),
-      })),
-  ].map((option) => {
-    const targetSlug = option.code === 'en' ? activeBaseSlug : `${option.code}/${activeBaseSlug}`;
-    const fallbackSlug = option.code === 'en' ? 'index' : `${option.code}/index`;
-    const resolvedSlug = wikiDocBySlug.has(targetSlug) ? targetSlug : fallbackSlug;
-    const translated = wikiDocBySlug.has(targetSlug);
-    return {
-      ...option,
-      route: toWikiRoute(resolvedSlug),
-      translated,
-    };
-  });
-
-  const resolveWikiRouteFromHref = (href: string): string | null => {
-    if (!href || isExternalHref(href) || href.startsWith('mailto:') || href.startsWith('tel:')) {
-      return null;
-    }
-    const { path, hash } = splitHash(href);
-    if (!path || !path.toLowerCase().endsWith('.md')) return null;
-
-    const resolvedFilePath = resolveFromFile(selectedDoc.filePath, path).toLowerCase();
-    const targetDoc = wikiDocByFilePath.get(resolvedFilePath);
-    if (!targetDoc) return null;
-    return `${toWikiRoute(targetDoc.slug)}${hash}`;
-  };
-
-  const resolveAssetUrl = (srcOrHref: string): string | null => {
-    if (!srcOrHref || isExternalHref(srcOrHref) || srcOrHref.startsWith('/')) return null;
-    const { path } = splitHash(srcOrHref);
-    if (!path) return null;
-    const resolvedAssetPath = resolveFromFile(selectedDoc.filePath, path).toLowerCase();
-    return wikiAssetByPath.get(resolvedAssetPath) ?? null;
-  };
-
-  const wikiMarkdownComponents: Components = {
-    ...defaultMarkdownComponents,
-    a: ({ href, children }) => {
-      if (!href) return <span className="text-gray-300">{children}</span>;
-
-      const wikiRoute = resolveWikiRouteFromHref(href);
-      if (wikiRoute) {
-        return (
-          <Link to={wikiRoute} className="text-clawd-accent hover:underline">
-            {children}
-          </Link>
-        );
-      }
-
-      const assetHref = resolveAssetUrl(href);
-      const finalHref = assetHref ?? href;
-      const safeHref = sanitizeHref(finalHref);
-      if (!safeHref) {
-        return <span className="text-gray-300">{children}</span>;
-      }
-      const external = isExternalHref(safeHref);
-
-      return (
-        <a
-          href={safeHref}
-          target={external ? '_blank' : undefined}
-          rel={external ? 'noopener noreferrer' : undefined}
-          className="text-clawd-accent hover:underline"
-        >
-          {children}
-        </a>
-      );
-    },
-    img: ({ src, alt }) => {
-      const resolvedSrc = src ? resolveAssetUrl(src) : null;
-      const finalSrc = resolvedSrc ?? (src ? sanitizeImageSrc(src) : null);
-      if (!finalSrc) {
-        return <span className="text-gray-500 text-sm">[image blocked]</span>;
-      }
-      return (
-        <img
-          src={finalSrc}
-          alt={alt ?? ''}
-          className="max-w-full h-auto rounded-lg border border-clawd-700 bg-clawd-900/40 p-2 my-4"
-          loading="lazy"
-        />
-      );
-    },
-  };
-
-  return (
-    <div className="pt-[52px] space-y-8">
-      <section className="space-y-3">
-        <h1 className="text-3xl md:text-4xl text-white flex items-center gap-3">
-          <BookOpenText className="text-clawd-accent" />
-          Wiki
-        </h1>
-        <p className="text-gray-400 max-w-3xl">
-          Full repository wiki rendered from markdown in <code className="text-gray-300">wiki/</code>.
-          This is the same source synced to GitHub Wiki.
-        </p>
-        <div className="flex flex-wrap items-center gap-2 text-sm text-gray-300">
-          <span className="text-gray-400">Language:</span>
-          {languageOptions.map((option) => {
-            const isActiveLanguage = option.code === currentLanguageCode;
-            return isActiveLanguage ? (
-              <span
-                key={option.code}
-                className="px-2 py-1 rounded bg-clawd-700 text-white border border-clawd-600"
-              >
-                {option.label}
-              </span>
-            ) : (
-              <Link
-                key={option.code}
-                to={option.route}
-                className="px-2 py-1 rounded border border-clawd-700 hover:border-clawd-accent hover:text-white transition-colors"
-                title={option.translated ? `Open ${option.label} translation` : `Open ${option.label} index fallback`}
-              >
-                {option.label}
-                {option.translated ? (
-                  <span className="text-gray-500"> · translated</span>
-                ) : (
-                  <span className="text-gray-500"> · index fallback</span>
-                )}
-              </Link>
-            );
-          })}
-        </div>
-
-        <div className="flex flex-wrap gap-3">
-          <a
-            href={pageLlmsPath}
-            target="_blank"
-            rel="noopener noreferrer"
-            className="inline-flex items-center gap-2 px-3 py-1.5 rounded-md bg-clawd-700 hover:bg-clawd-600 text-white text-sm transition-colors"
-          >
-            <FileText size={15} />
-            Page llms.txt
-          </a>
-          {showWikiLlmsIndexLink && (
-            <a
-              href="/wiki/llms.txt"
-              target="_blank"
-              rel="noopener noreferrer"
-              className="inline-flex items-center gap-2 px-3 py-1.5 rounded-md bg-clawd-800 border border-clawd-700 hover:border-clawd-accent text-white text-sm transition-colors"
-            >
-              <FileText size={15} />
-              Wiki llms.txt Index
-            </a>
-          )}
-          <a
-            href="https://github.com/prompt-security/clawsec/wiki"
-            target="_blank"
-            rel="noopener noreferrer"
-            className="inline-flex items-center gap-2 px-3 py-1.5 rounded-md border border-clawd-700 hover:border-clawd-accent text-gray-200 text-sm transition-colors"
-          >
-            <ExternalLink size={15} />
-            GitHub Wiki
-          </a>
-        </div>
-      </section>
-
-      <div className="grid lg:grid-cols-[280px_minmax(0,1fr)] gap-6 items-start">
-        <aside className="bg-clawd-800/50 border border-clawd-700 rounded-xl p-4 lg:sticky lg:top-20 max-h-[calc(100vh-7rem)] overflow-auto">
-          <div className="space-y-5">
-            {groupedDocs.map((group) => (
-              <section key={group.name} className="space-y-2">
-                <h2 className="text-xs uppercase tracking-wide text-gray-400">{group.name}</h2>
-                <div className="space-y-1">
-                  {group.docs.map((doc) => {
-                    const isActive = activeSlug === doc.slug.toLowerCase();
-                    return (
-                      <Link
-                        key={doc.filePath}
-                        to={toWikiRoute(doc.slug)}
-                        className={`block px-3 py-2 rounded-md text-sm transition-colors ${
-                          isActive
-                            ? 'bg-white/10 text-white border border-white/10'
-                            : 'text-gray-300 hover:text-white hover:bg-white/5'
-                        }`}
-                      >
-                        {doc.title}
-                      </Link>
-                    );
-                  })}
-                </div>
-              </section>
-            ))}
-          </div>
-        </aside>
-
-        <section className="bg-clawd-800/50 border border-clawd-700 rounded-xl p-4 sm:p-6 md:p-8 overflow-x-hidden">
-          {notFound && (
-            <div className="mb-6 p-3 rounded-md border border-orange-800 bg-orange-900/20 text-orange-200 text-sm">
-              Wiki page not found for <code>{requested}</code>. Showing <strong>{selectedDoc.title}</strong> instead.
-            </div>
-          )}
-
-          <Markdown
-            remarkPlugins={[remarkGfm]}
-            components={wikiMarkdownComponents}
-          >
-            {selectedDoc.content}
-          </Markdown>
-        </section>
-      </div>
-
-      <Footer />
-    </div>
-  );
-};

scripts/archive-github-traffic.mjs

@@ -1,486 +0,0 @@
-#!/usr/bin/env node
-
-import { promises as fs } from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const REPO_ROOT = path.resolve(__dirname, '..');
-const API_ROOT = 'https://api.github.com';
-const GITHUB_API_VERSION = '2022-11-28';
-const ARCHIVE_VERSION = 1;
-const DAY_MS = 24 * 60 * 60 * 1000;
-
-const SUMMARY_WINDOWS = [
-  ['last_14_days', 14],
-  ['last_30_days', 30],
-  ['last_90_days', 90],
-  ['last_365_days', 365],
-];
-
-const toIsoString = (value, label) => {
-  const date = new Date(value);
-  if (Number.isNaN(date.getTime())) {
-    throw new Error(`Invalid ${label}: ${value}`);
-  }
-  return date.toISOString();
-};
-
-const toDailyTimestamp = (value) => `${toIsoString(value, 'traffic timestamp').slice(0, 10)}T00:00:00Z`;
-const toDateKey = (value) => toIsoString(value, 'capture timestamp').slice(0, 10);
-
-const toNonNegativeInteger = (value, label) => {
-  const number = Number(value);
-  if (!Number.isFinite(number) || number < 0) {
-    throw new Error(`Invalid ${label}: ${value}`);
-  }
-  return Math.trunc(number);
-};
-
-const toRequiredString = (value, label) => {
-  if (typeof value !== 'string') {
-    throw new Error(`${label} must be a non-empty string`);
-  }
-
-  const trimmed = value.trim();
-  if (!trimmed) {
-    throw new Error(`${label} must be a non-empty string`);
-  }
-
-  return trimmed;
-};
-
-const normalizeRepository = (repo) => {
-  const normalized = String(repo || '').trim();
-  if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(normalized)) {
-    throw new Error(`Repository must be in owner/name form, received: ${repo || '(empty)'}`);
-  }
-  return normalized;
-};
-
-const normalizeDailyEntries = (entries, label) => {
-  if (!Array.isArray(entries)) {
-    throw new Error(`${label} must be an array`);
-  }
-
-  return entries
-    .map((entry) => ({
-      timestamp: toDailyTimestamp(entry.timestamp),
-      count: toNonNegativeInteger(entry.count, `${label}.count`),
-      uniques: toNonNegativeInteger(entry.uniques, `${label}.uniques`),
-    }))
-    .sort((a, b) => a.timestamp.localeCompare(b.timestamp));
-};
-
-const normalizeReferrers = (entries) => {
-  if (!Array.isArray(entries)) {
-    throw new Error('referrers must be an array');
-  }
-
-  return entries.map((entry) => ({
-    referrer: toRequiredString(entry.referrer, 'referrers.referrer'),
-    count: toNonNegativeInteger(entry.count, 'referrers.count'),
-    uniques: toNonNegativeInteger(entry.uniques, 'referrers.uniques'),
-  }));
-};
-
-const normalizePaths = (entries) => {
-  if (!Array.isArray(entries)) {
-    throw new Error('paths must be an array');
-  }
-
-  return entries.map((entry) => ({
-    path: toRequiredString(entry.path, 'paths.path'),
-    title: toRequiredString(entry.title, 'paths.title'),
-    count: toNonNegativeInteger(entry.count, 'paths.count'),
-    uniques: toNonNegativeInteger(entry.uniques, 'paths.uniques'),
-  }));
-};
-
-const upsertByKey = (existing, incoming, key) => {
-  const entriesByKey = new Map();
-
-  for (const entry of existing || []) {
-    entriesByKey.set(entry[key], entry);
-  }
-  for (const entry of incoming || []) {
-    entriesByKey.set(entry[key], entry);
-  }
-
-  return [...entriesByKey.values()].sort((a, b) => String(a[key]).localeCompare(String(b[key])));
-};
-
-const latestEntry = (entries) => {
-  if (!entries?.length) {
-    return null;
-  }
-  return entries[entries.length - 1];
-};
-
-const sumSeries = (entries) => entries.reduce(
-  (totals, entry) => ({
-    count: totals.count + entry.count,
-    sum_daily_uniques: totals.sum_daily_uniques + entry.uniques,
-  }),
-  { count: 0, sum_daily_uniques: 0 },
-);
-
-const startOfUtcDay = (date) => Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate());
-
-const summarizeWindow = (entries, days, now) => {
-  const cutoff = new Date(startOfUtcDay(now) - ((days - 1) * DAY_MS));
-  const filtered = entries.filter((entry) => new Date(entry.timestamp) >= cutoff);
-  const totals = sumSeries(filtered);
-
-  return {
-    days,
-    count: totals.count,
-    sum_daily_uniques: totals.sum_daily_uniques,
-    unique_semantics: 'sum_of_daily_uniques',
-    first_date: filtered[0]?.timestamp.slice(0, 10) ?? null,
-    last_date: filtered.at(-1)?.timestamp.slice(0, 10) ?? null,
-  };
-};
-
-const summarizeAllTime = (entries) => {
-  const totals = sumSeries(entries);
-
-  return {
-    count: totals.count,
-    sum_daily_uniques: totals.sum_daily_uniques,
-    unique_semantics: 'sum_of_daily_uniques',
-    first_date: entries[0]?.timestamp.slice(0, 10) ?? null,
-    last_date: entries.at(-1)?.timestamp.slice(0, 10) ?? null,
-  };
-};
-
-const normalizeExistingArchive = (archive, repository, capturedAt) => {
-  if (!archive) {
-    return {
-      version: ARCHIVE_VERSION,
-      repository,
-      archive_started_at: capturedAt,
-      updated_at: capturedAt,
-      daily: {
-        views: [],
-        clones: [],
-      },
-      snapshots: {
-        referrers: [],
-        paths: [],
-      },
-      captures: [],
-    };
-  }
-
-  if (archive.repository && archive.repository !== repository) {
-    throw new Error(`Archive repository mismatch: ${archive.repository} != ${repository}`);
-  }
-
-  return {
-    version: ARCHIVE_VERSION,
-    repository,
-    archive_started_at: archive.archive_started_at || capturedAt,
-    updated_at: archive.updated_at || capturedAt,
-    daily: {
-      views: normalizeDailyEntries(archive.daily?.views || [], 'daily.views'),
-      clones: normalizeDailyEntries(archive.daily?.clones || [], 'daily.clones'),
-    },
-    snapshots: {
-      referrers: (archive.snapshots?.referrers || []).map((snapshot) => ({
-        captured_at: toIsoString(snapshot.captured_at, 'referrer snapshot timestamp'),
-        date: snapshot.date || toDateKey(snapshot.captured_at),
-        entries: normalizeReferrers(snapshot.entries || []),
-      })),
-      paths: (archive.snapshots?.paths || []).map((snapshot) => ({
-        captured_at: toIsoString(snapshot.captured_at, 'path snapshot timestamp'),
-        date: snapshot.date || toDateKey(snapshot.captured_at),
-        entries: normalizePaths(snapshot.entries || []),
-      })),
-    },
-    captures: (archive.captures || []).map((capture) => ({
-      captured_at: toIsoString(capture.captured_at, 'capture timestamp'),
-      date: capture.date || toDateKey(capture.captured_at),
-      views_window: {
-        count: toNonNegativeInteger(capture.views_window?.count || 0, 'captures.views_window.count'),
-        uniques: toNonNegativeInteger(capture.views_window?.uniques || 0, 'captures.views_window.uniques'),
-      },
-      clones_window: {
-        count: toNonNegativeInteger(capture.clones_window?.count || 0, 'captures.clones_window.count'),
-        uniques: toNonNegativeInteger(capture.clones_window?.uniques || 0, 'captures.clones_window.uniques'),
-      },
-    })),
-  };
-};
-
-export const mergeTrafficArchive = (existingArchive, snapshot) => {
-  const repository = normalizeRepository(snapshot.repository);
-  const capturedAt = toIsoString(snapshot.captured_at, 'capture timestamp');
-  const captureDate = toDateKey(capturedAt);
-  const archive = normalizeExistingArchive(existingArchive, repository, capturedAt);
-
-  const views = normalizeDailyEntries(snapshot.views?.views || [], 'views');
-  const clones = normalizeDailyEntries(snapshot.clones?.clones || [], 'clones');
-  const referrerSnapshot = {
-    captured_at: capturedAt,
-    date: captureDate,
-    entries: normalizeReferrers(snapshot.referrers || []),
-  };
-  const pathSnapshot = {
-    captured_at: capturedAt,
-    date: captureDate,
-    entries: normalizePaths(snapshot.paths || []),
-  };
-  const capture = {
-    captured_at: capturedAt,
-    date: captureDate,
-    views_window: {
-      count: toNonNegativeInteger(snapshot.views?.count ?? sumSeries(views).count, 'views.count'),
-      uniques: toNonNegativeInteger(snapshot.views?.uniques ?? sumSeries(views).sum_daily_uniques, 'views.uniques'),
-    },
-    clones_window: {
-      count: toNonNegativeInteger(snapshot.clones?.count ?? sumSeries(clones).count, 'clones.count'),
-      uniques: toNonNegativeInteger(snapshot.clones?.uniques ?? sumSeries(clones).sum_daily_uniques, 'clones.uniques'),
-    },
-  };
-
-  return {
-    ...archive,
-    updated_at: capturedAt,
-    daily: {
-      views: upsertByKey(archive.daily.views, views, 'timestamp'),
-      clones: upsertByKey(archive.daily.clones, clones, 'timestamp'),
-    },
-    snapshots: {
-      referrers: upsertByKey(archive.snapshots.referrers, [referrerSnapshot], 'date'),
-      paths: upsertByKey(archive.snapshots.paths, [pathSnapshot], 'date'),
-    },
-    captures: upsertByKey(archive.captures, [capture], 'date'),
-  };
-};
-
-export const buildTrafficSummary = (archive, options = {}) => {
-  const now = new Date(options.now || new Date().toISOString());
-  if (Number.isNaN(now.getTime())) {
-    throw new Error(`Invalid summary date: ${options.now}`);
-  }
-
-  const views = archive.daily?.views || [];
-  const clones = archive.daily?.clones || [];
-  const buildMetrics = (entries) => {
-    const metrics = Object.fromEntries(SUMMARY_WINDOWS.map(([key, days]) => [
-      key,
-      summarizeWindow(entries, days, now),
-    ]));
-    metrics.all_time = summarizeAllTime(entries);
-    return metrics;
-  };
-
-  return {
-    version: ARCHIVE_VERSION,
-    repository: archive.repository,
-    generated_at: now.toISOString(),
-    archive_started_at: archive.archive_started_at || null,
-    updated_at: archive.updated_at || null,
-    source: {
-      api: 'GitHub REST repository traffic endpoints',
-      retention_limit: 'GitHub exposes roughly the last 14 days; this archive keeps daily snapshots long term.',
-      unique_semantics: 'GitHub daily unique values are retained as sum_daily_uniques for longer windows, not deduplicated visitors.',
-    },
-    metrics: {
-      views: buildMetrics(views),
-      clones: buildMetrics(clones),
-    },
-    daily: {
-      views,
-      clones,
-    },
-    latest_snapshots: {
-      referrers: latestEntry(archive.snapshots?.referrers || []),
-      paths: latestEntry(archive.snapshots?.paths || []),
-    },
-    snapshot_counts: {
-      referrers: archive.snapshots?.referrers?.length || 0,
-      paths: archive.snapshots?.paths?.length || 0,
-      captures: archive.captures?.length || 0,
-    },
-  };
-};
-
-const fetchJson = async ({ repo, token, pathname, fetchImpl }) => {
-  const url = new URL(pathname, API_ROOT);
-  const response = await fetchImpl(url, {
-    headers: {
-      Accept: 'application/vnd.github+json',
-      Authorization: `Bearer ${token}`,
-      'User-Agent': 'clawsec-traffic-archive',
-      'X-GitHub-Api-Version': GITHUB_API_VERSION,
-    },
-  });
-
-  if (!response.ok) {
-    const body = await response.text().catch(() => '');
-    const suffix = body ? ` ${body.slice(0, 500)}` : '';
-    throw new Error(`GitHub traffic API request failed for ${repo}: ${url.pathname}${url.search} returned ${response.status}.${suffix}`);
-  }
-
-  return response.json();
-};
-
-export const fetchGitHubTraffic = async ({
-  repo,
-  token,
-  capturedAt = new Date().toISOString(),
-  fetchImpl = globalThis.fetch,
-}) => {
-  const repository = normalizeRepository(repo);
-  if (!token) {
-    throw new Error('A GitHub token is required to read repository traffic.');
-  }
-  if (typeof fetchImpl !== 'function') {
-    throw new Error('fetch is not available in this Node runtime.');
-  }
-
-  const encodedRepo = repository.split('/').map(encodeURIComponent).join('/');
-  const request = (pathname) => fetchJson({
-    repo: repository,
-    token,
-    pathname: `/repos/${encodedRepo}${pathname}`,
-    fetchImpl,
-  });
-
-  const [views, clones, referrers, paths] = await Promise.all([
-    request('/traffic/views?per=day'),
-    request('/traffic/clones?per=day'),
-    request('/traffic/popular/referrers'),
-    request('/traffic/popular/paths'),
-  ]);
-
-  return {
-    repository,
-    captured_at: toIsoString(capturedAt, 'capture timestamp'),
-    views,
-    clones,
-    referrers,
-    paths,
-  };
-};
-
-const readJsonIfPresent = async (file) => {
-  try {
-    return JSON.parse(await fs.readFile(file, 'utf8'));
-  } catch (error) {
-    if (error?.code === 'ENOENT') {
-      return undefined;
-    }
-    throw error;
-  }
-};
-
-const writeTextAtomic = async (file, content) => {
-  const dir = path.dirname(file);
-  const tempFile = path.join(dir, `.${path.basename(file)}.${process.pid}.${Date.now()}.tmp`);
-  let handle;
-
-  await fs.mkdir(dir, { recursive: true });
-
-  try {
-    handle = await fs.open(tempFile, 'w');
-    await handle.writeFile(content, 'utf8');
-    await handle.sync();
-    await handle.close();
-    handle = undefined;
-    await fs.rename(tempFile, file);
-  } catch (error) {
-    if (handle) {
-      await handle.close().catch(() => {});
-    }
-    await fs.unlink(tempFile).catch(() => {});
-    throw error;
-  }
-};
-
-export const writeJson = async (file, value) => {
-  await writeTextAtomic(file, `${JSON.stringify(value, null, 2)}\n`);
-};
-
-const parseArgs = (args) => {
-  const options = {};
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index];
-    if (arg === '--archive-dir') {
-      options.archiveDir = args[index + 1];
-      index += 1;
-    } else if (arg === '--repo') {
-      options.repo = args[index + 1];
-      index += 1;
-    } else if (arg === '--captured-at') {
-      options.capturedAt = args[index + 1];
-      index += 1;
-    } else if (arg === '--help' || arg === '-h') {
-      options.help = true;
-    } else {
-      throw new Error(`Unknown argument: ${arg}`);
-    }
-  }
-  return options;
-};
-
-const printHelp = () => {
-  console.log(`Usage: node scripts/archive-github-traffic.mjs [options]
-
-Options:
-  --archive-dir <dir>   Directory that will receive archive.json and summary.json.
-  --repo <owner/repo>   Repository to archive. Defaults to GITHUB_REPOSITORY.
-  --captured-at <iso>   Override capture time for tests or backfills.
-`);
-};
-
-const main = async () => {
-  const options = parseArgs(process.argv.slice(2));
-  if (options.help) {
-    printHelp();
-    return;
-  }
-
-  const archiveDir = path.resolve(
-    REPO_ROOT,
-    options.archiveDir || process.env.TRAFFIC_ARCHIVE_DIR || 'traffic',
-  );
-  const archiveFile = path.join(archiveDir, 'archive.json');
-  const summaryFile = path.join(archiveDir, 'summary.json');
-  const repository = normalizeRepository(options.repo || process.env.GITHUB_REPOSITORY);
-  const token = process.env.GH_TRAFFIC_TOKEN
-    || process.env.TRAFFIC_ARCHIVE_TOKEN
-    || process.env.GITHUB_TOKEN
-    || process.env.GH_TOKEN;
-  const capturedAt = options.capturedAt || new Date().toISOString();
-
-  const snapshot = await fetchGitHubTraffic({
-    repo: repository,
-    token,
-    capturedAt,
-  });
-  const existingArchive = await readJsonIfPresent(archiveFile);
-  const archive = mergeTrafficArchive(existingArchive, snapshot);
-  const summary = buildTrafficSummary(archive, { now: archive.updated_at });
-
-  await writeJson(archiveFile, archive);
-  await writeJson(summaryFile, summary);
-
-  console.log(`Archived GitHub traffic for ${repository} at ${archive.updated_at}`);
-  console.log(`Daily views retained: ${archive.daily.views.length}`);
-  console.log(`Daily clones retained: ${archive.daily.clones.length}`);
-  console.log(`Referrer snapshots retained: ${archive.snapshots.referrers.length}`);
-  console.log(`Path snapshots retained: ${archive.snapshots.paths.length}`);
-};
-
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-  try {
-    await main();
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    console.error(`Failed to archive GitHub traffic: ${message}`);
-    process.exit(1);
-  }
-}

scripts/backfill-exploitability.sh

@@ -1,281 +0,0 @@
-#!/bin/bash
-# backfill-exploitability.sh
-# Adds exploitability scoring to existing advisories in feed.json that don't have it yet.
-# Historical maintenance utility: normal advisory generation should use
-# poll-nvd workflow (init/reset when rebuilding) or populate-local-feed.sh.
-#
-# Usage: ./scripts/backfill-exploitability.sh [--dry-run] [--feed PATH]
-#   --dry-run   Show what would be updated without making changes
-#   --feed PATH Use specified feed file (default: advisories/feed.json)
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-# shellcheck source=./feed-utils.sh
-source "$SCRIPT_DIR/feed-utils.sh"
-
-# Configuration
-init_feed_paths "$PROJECT_ROOT"
-ANALYZER="$PROJECT_ROOT/utils/analyze_exploitability.py"
-SIGNING_PRIVATE_KEY="${CLAWSEC_FEED_SIGNING_PRIVATE_KEY_PATH:-${CLAWSEC_SIGNING_PRIVATE_KEY_PATH:-$PROJECT_ROOT/clawsec-signing-private.pem}}"
-SIGNING_PUBLIC_KEY="${CLAWSEC_FEED_SIGNING_PUBLIC_KEY_PATH:-${CLAWSEC_SIGNING_PUBLIC_KEY_PATH:-$PROJECT_ROOT/clawsec-signing-public.pem}}"
-SIGNING_PASSPHRASE="${CLAWSEC_FEED_SIGNING_PRIVATE_KEY_PASSPHRASE:-${CLAWSEC_SIGNING_PRIVATE_KEY_PASSPHRASE:-}}"
-
-sign_and_verify_feed_signature() {
-  local feed_file="$1"
-  local signature_file="$2"
-  local tmp_dir
-  local tmp_signature
-  local signature_bin
-  local passin_file
-
-  tmp_dir=$(mktemp -d)
-  tmp_signature="${signature_file}.tmp.$$"
-  signature_bin="$tmp_dir/signature.bin"
-  passin_file="$tmp_dir/passin.txt"
-
-  if [ -n "$SIGNING_PASSPHRASE" ]; then
-    printf '%s' "$SIGNING_PASSPHRASE" > "$passin_file"
-    chmod 600 "$passin_file"
-
-    if ! openssl pkeyutl -sign -rawin -inkey "$SIGNING_PRIVATE_KEY" -passin "file:$passin_file" -in "$feed_file" \
-      | openssl base64 -A > "$tmp_signature"; then
-      rm -rf "$tmp_dir"
-      rm -f "$tmp_signature"
-      echo "Error: Failed to sign $feed_file" >&2
-      return 1
-    fi
-  elif ! openssl pkeyutl -sign -rawin -inkey "$SIGNING_PRIVATE_KEY" -in "$feed_file" \
-    | openssl base64 -A > "$tmp_signature"; then
-    rm -rf "$tmp_dir"
-    rm -f "$tmp_signature"
-    echo "Error: Failed to sign $feed_file" >&2
-    return 1
-  fi
-
-  if ! openssl base64 -d -A -in "$tmp_signature" -out "$signature_bin"; then
-    rm -rf "$tmp_dir"
-    rm -f "$tmp_signature"
-    echo "Error: Failed to decode generated signature for $feed_file" >&2
-    return 1
-  fi
-
-  if ! openssl pkeyutl -verify -rawin -pubin -inkey "$SIGNING_PUBLIC_KEY" -sigfile "$signature_bin" -in "$feed_file" >/dev/null; then
-    rm -rf "$tmp_dir"
-    rm -f "$tmp_signature"
-    echo "Error: Signature verification failed after signing $feed_file" >&2
-    return 1
-  fi
-
-  mv "$tmp_signature" "$signature_file"
-  rm -rf "$tmp_dir"
-  echo "✓ Re-signed and verified: $signature_file"
-}
-
-# Parse args
-DRY_RUN=false
-REQUIRE_SIGNING=false
-
-while [[ $# -gt 0 ]]; do
-  case $1 in
-    --dry-run)
-      DRY_RUN=true
-      shift
-      ;;
-    --feed)
-      FEED_PATH="$2"
-      shift 2
-      ;;
-    *)
-      echo "Unknown option: $1"
-      echo "Usage: $0 [--dry-run] [--feed PATH]"
-      exit 1
-      ;;
-  esac
-done
-
-echo "=== ClawSec Exploitability Backfill ==="
-echo "Feed path: $FEED_PATH"
-echo "Dry run: $DRY_RUN"
-echo ""
-
-# Verify prerequisites
-if [ ! -f "$FEED_PATH" ]; then
-  echo "Error: Feed file not found: $FEED_PATH"
-  exit 1
-fi
-
-if [ ! -f "$ANALYZER" ]; then
-  echo "Error: Analyzer script not found: $ANALYZER"
-  exit 1
-fi
-
-# Check Python availability
-if ! command -v python3 &> /dev/null; then
-  echo "Error: python3 is required but not found in PATH"
-  exit 1
-fi
-
-# Verify analyzer works
-if ! python3 "$ANALYZER" --help &> /dev/null; then
-  echo "Error: Analyzer script failed to run. Check Python environment."
-  exit 1
-fi
-
-# Determine whether detached signatures must be regenerated.
-# Runtime agents that only have public keys should run in dry-run mode.
-if [ "$DRY_RUN" = "false" ]; then
-  if [ -f "${FEED_PATH}.sig" ]; then
-    REQUIRE_SIGNING=true
-  fi
-fi
-
-if [ "$REQUIRE_SIGNING" = "true" ]; then
-  if ! command -v openssl &> /dev/null; then
-    echo "Error: openssl is required for detached signature signing/verification"
-    exit 1
-  fi
-
-  if [ ! -f "$SIGNING_PRIVATE_KEY" ]; then
-    echo "Error: Signing private key not found: $SIGNING_PRIVATE_KEY"
-    echo "This backfill updates signed feed artifacts. Use --dry-run in public-key-only environments."
-    exit 1
-  fi
-
-  if [ ! -f "$SIGNING_PUBLIC_KEY" ]; then
-    echo "Error: Signing public key not found: $SIGNING_PUBLIC_KEY"
-    exit 1
-  fi
-fi
-
-# Create temp directory
-TEMP_DIR=$(mktemp -d)
-trap 'rm -rf "$TEMP_DIR"' EXIT
-
-echo "=== Analyzing Feed ==="
-
-# Extract advisories without exploitability_score
-jq '.advisories | map(select(.exploitability_score == null or .exploitability_score == ""))' \
-  "$FEED_PATH" > "$TEMP_DIR/missing_exploitability.json"
-
-MISSING_COUNT=$(jq 'length' "$TEMP_DIR/missing_exploitability.json")
-TOTAL_COUNT=$(jq '.advisories | length' "$FEED_PATH")
-ALREADY_DONE=$((TOTAL_COUNT - MISSING_COUNT))
-
-echo "Total advisories: $TOTAL_COUNT"
-echo "Already have exploitability: $ALREADY_DONE"
-echo "Missing exploitability: $MISSING_COUNT"
-echo ""
-
-if [ "$MISSING_COUNT" -eq 0 ]; then
-  echo "✓ All advisories already have exploitability scores!"
-  exit 0
-fi
-
-if [ "$DRY_RUN" = "true" ]; then
-  echo "=== Dry Run - Would Update These Advisories ==="
-  jq -r '.[] | .id' "$TEMP_DIR/missing_exploitability.json"
-  echo ""
-  echo "Total advisories to update: $MISSING_COUNT"
-  exit 0
-fi
-
-echo "=== Processing Advisories ==="
-
-# Process each advisory
-PROCESSED=0
-FAILED=0
-
-# Read original feed to preserve all metadata
-cp "$FEED_PATH" "$TEMP_DIR/feed_working.json"
-
-while IFS= read -r advisory; do
-  CVE_ID=$(echo "$advisory" | jq -r '.id')
-
-  echo -n "Processing $CVE_ID... "
-
-  # Prepare input for analyzer
-  ANALYZER_INPUT=$(echo "$advisory" | jq '{
-    cve_id: .id,
-    cvss_score: (.cvss_score // 0.0),
-    type: .type,
-    description: .description,
-    references: (.references // [])
-  }')
-
-  # Run analyzer
-  if ANALYSIS=$(echo "$ANALYZER_INPUT" | python3 "$ANALYZER" --json --check-exploits 2>/dev/null); then
-    # Extract exploitability fields
-    EXPL_SCORE=$(echo "$ANALYSIS" | jq -r '.exploitability_score // "unknown"')
-    EXPL_RATIONALE=$(echo "$ANALYSIS" | jq -r '.exploitability_rationale // "No rationale available"')
-
-    # Update advisory in working feed
-    jq --arg id "$CVE_ID" \
-       --arg score "$EXPL_SCORE" \
-       --arg rationale "$EXPL_RATIONALE" \
-       '(.advisories[] | select(.id == $id)) |= (. + {
-         exploitability_score: $score,
-         exploitability_rationale: $rationale
-       })' "$TEMP_DIR/feed_working.json" > "$TEMP_DIR/feed_updated.json"
-
-    mv "$TEMP_DIR/feed_updated.json" "$TEMP_DIR/feed_working.json"
-
-    echo "✓ $EXPL_SCORE"
-    PROCESSED=$((PROCESSED + 1))
-  else
-    echo "✗ Failed"
-    FAILED=$((FAILED + 1))
-  fi
-done < <(jq -c '.[]' "$TEMP_DIR/missing_exploitability.json")
-
-# Check if loop executed successfully
-if [ ! -f "$TEMP_DIR/feed_working.json" ]; then
-  echo "Error: Feed processing failed"
-  exit 1
-fi
-
-echo ""
-echo "=== Processing Complete ==="
-echo "Processed: $PROCESSED"
-echo "Failed: $FAILED"
-echo ""
-
-# Write updated feed
-echo "Writing updated feed to: $FEED_PATH"
-cp "$TEMP_DIR/feed_working.json" "$FEED_PATH"
-
-# Update feed version and timestamp
-CURRENT_VERSION=$(jq -r '.version' "$FEED_PATH")
-UPDATED_TS=$(date -u +%Y-%m-%dT%H:%M:%SZ)
-
-jq --arg ts "$UPDATED_TS" '.updated = $ts' "$FEED_PATH" > "$TEMP_DIR/feed_final.json"
-mv "$TEMP_DIR/feed_final.json" "$FEED_PATH"
-
-echo "✓ Updated feed version: $CURRENT_VERSION"
-echo "✓ Updated timestamp: $UPDATED_TS"
-echo ""
-
-if [ "$REQUIRE_SIGNING" = "true" ]; then
-  echo ""
-  echo "=== Re-signing Advisory Feed ==="
-
-  if [ -f "${FEED_PATH}.sig" ]; then
-    if ! sign_and_verify_feed_signature "$FEED_PATH" "${FEED_PATH}.sig"; then
-      exit 1
-    fi
-  fi
-fi
-
-echo ""
-echo "=== Summary ==="
-echo "✓ Backfill complete!"
-echo "✓ $PROCESSED advisories updated with exploitability scores"
-
-if [ "$FAILED" -gt 0 ]; then
-  echo "⚠ $FAILED advisories failed analysis (kept original data)"
-fi
-
-# Verify final state
-FINAL_MISSING=$(jq '.advisories | map(select(.exploitability_score == null or .exploitability_score == "")) | length' "$FEED_PATH")
-echo "✓ Advisories still missing exploitability: $FINAL_MISSING"

scripts/ci/enrich_exploitability.sh

@@ -1,263 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-usage() {
-  cat <<'EOF'
-Usage:
-  scripts/ci/enrich_exploitability.sh --mode single|batch --input <path> --output <path> [--cvss-vectors <path>] [--analyzer <path>]
-
-Options:
-  --mode           Processing mode: single advisory object or batch advisory array
-  --input          Input JSON path
-  --output         Output JSON path
-  --cvss-vectors   Optional JSON object mapping advisory id -> CVSS vector
-  --analyzer       Optional analyzer path (default: utils/analyze_exploitability.py)
-  --help           Show this help
-EOF
-}
-
-REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-cd "$REPO_ROOT"
-
-MODE=""
-INPUT_PATH=""
-OUTPUT_PATH=""
-CVSS_VECTORS_PATH=""
-ANALYZER_PATH="utils/analyze_exploitability.py"
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --mode)
-      MODE="${2:-}"
-      shift 2
-      ;;
-    --input)
-      INPUT_PATH="${2:-}"
-      shift 2
-      ;;
-    --output)
-      OUTPUT_PATH="${2:-}"
-      shift 2
-      ;;
-    --cvss-vectors)
-      CVSS_VECTORS_PATH="${2:-}"
-      shift 2
-      ;;
-    --analyzer)
-      ANALYZER_PATH="${2:-}"
-      shift 2
-      ;;
-    --help|-h)
-      usage
-      exit 0
-      ;;
-    *)
-      echo "ERROR: Unknown argument: $1" >&2
-      usage >&2
-      exit 1
-      ;;
-  esac
-done
-
-if [[ "$MODE" != "single" && "$MODE" != "batch" ]]; then
-  echo "ERROR: --mode must be one of: single, batch" >&2
-  exit 1
-fi
-
-if [[ -z "$INPUT_PATH" || -z "$OUTPUT_PATH" ]]; then
-  echo "ERROR: --input and --output are required" >&2
-  exit 1
-fi
-
-if [[ ! -f "$INPUT_PATH" ]]; then
-  echo "ERROR: input file not found: $INPUT_PATH" >&2
-  exit 1
-fi
-
-if [[ ! -f "$ANALYZER_PATH" ]]; then
-  echo "ERROR: analyzer file not found: $ANALYZER_PATH" >&2
-  exit 1
-fi
-
-if [[ -n "$CVSS_VECTORS_PATH" && ! -f "$CVSS_VECTORS_PATH" ]]; then
-  echo "ERROR: --cvss-vectors file not found: $CVSS_VECTORS_PATH" >&2
-  exit 1
-fi
-
-if ! command -v jq >/dev/null 2>&1; then
-  echo "ERROR: jq is required" >&2
-  exit 1
-fi
-
-if command -v python >/dev/null 2>&1; then
-  PYTHON_BIN="python"
-elif command -v python3 >/dev/null 2>&1; then
-  PYTHON_BIN="python3"
-else
-  echo "ERROR: python or python3 is required" >&2
-  exit 1
-fi
-
-tmpdir="$(mktemp -d)"
-trap 'rm -rf "$tmpdir"' EXIT
-
-resolve_cvss_vector() {
-  local advisory_json="$1"
-  local advisory_id
-  advisory_id="$(echo "$advisory_json" | jq -r '.id // ""')"
-
-  if [[ -n "$CVSS_VECTORS_PATH" ]]; then
-    jq -r --arg id "$advisory_id" '.[$id] // ""' "$CVSS_VECTORS_PATH"
-  else
-    echo "$advisory_json" | jq -r '.cvss_vector // ""'
-  fi
-}
-
-severity_to_cvss() {
-  case "$1" in
-    critical) echo "9.5" ;;
-    high) echo "7.5" ;;
-    medium) echo "5.5" ;;
-    low) echo "3.0" ;;
-    *) echo "5.0" ;;
-  esac
-}
-
-build_analysis_input() {
-  local advisory_json="$1"
-  local mode="$2"
-  local cve_id cvss_score cvss_vector vuln_type description references severity
-
-  cve_id="$(echo "$advisory_json" | jq -r '.id // ""')"
-  vuln_type="$(echo "$advisory_json" | jq -r '.type // ""')"
-  description="$(echo "$advisory_json" | jq -r '.description // ""')"
-  references="$(echo "$advisory_json" | jq -c '.references // []')"
-  cvss_vector="$(resolve_cvss_vector "$advisory_json")"
-
-  if [[ "$mode" == "single" ]]; then
-    severity="$(echo "$advisory_json" | jq -r '.severity // "medium"')"
-    cvss_score="$(severity_to_cvss "$severity")"
-  else
-    cvss_score="$(echo "$advisory_json" | jq -r '.cvss_score // 0')"
-  fi
-
-  jq -n \
-    --arg cve_id "$cve_id" \
-    --argjson cvss_score "$cvss_score" \
-    --arg cvss_vector "$cvss_vector" \
-    --arg type "$vuln_type" \
-    --arg description "$description" \
-    --argjson references "$references" \
-    '{
-      cve_id: $cve_id,
-      cvss_score: $cvss_score,
-      cvss_vector: $cvss_vector,
-      type: $type,
-      description: $description,
-      references: $references
-    }'
-}
-
-run_analysis() {
-  local advisory_json="$1"
-  local mode="$2"
-  local output_file="$3"
-  local advisory_id analysis_input analysis
-
-  advisory_id="$(echo "$advisory_json" | jq -r '.id // "unknown"')"
-  analysis_input="$(build_analysis_input "$advisory_json" "$mode")"
-
-  if analysis="$(echo "$analysis_input" | "$PYTHON_BIN" "$ANALYZER_PATH" --json --check-exploits 2>/dev/null)"; then
-    echo "$analysis" > "$output_file"
-    return 0
-  fi
-
-  echo "::warning::Failed to analyze exploitability for $advisory_id, continuing without enrichment"
-  return 1
-}
-
-enrich_single() {
-  if ! jq -e 'type == "object"' "$INPUT_PATH" >/dev/null; then
-    echo "ERROR: single mode expects JSON object at $INPUT_PATH" >&2
-    exit 1
-  fi
-
-  local advisory analysis_file output_tmp
-  advisory="$(cat "$INPUT_PATH")"
-  analysis_file="$tmpdir/analysis_single.json"
-  output_tmp="$tmpdir/output_single.json"
-
-  if run_analysis "$advisory" "single" "$analysis_file"; then
-    jq --slurpfile analysis "$analysis_file" '
-      . + {
-        exploitability_score: $analysis[0].exploitability_score,
-        exploitability_rationale: $analysis[0].exploitability_rationale,
-        attack_vector_analysis: $analysis[0].attack_vector_analysis,
-        exploit_detection: $analysis[0].exploit_detection
-      }
-    ' "$INPUT_PATH" > "$output_tmp"
-  else
-    cp "$INPUT_PATH" "$output_tmp"
-  fi
-
-  mv "$output_tmp" "$OUTPUT_PATH"
-  echo "Exploitability enrichment complete (single): $OUTPUT_PATH"
-}
-
-enrich_batch() {
-  if ! jq -e 'type == "array"' "$INPUT_PATH" >/dev/null; then
-    echo "ERROR: batch mode expects JSON array at $INPUT_PATH" >&2
-    exit 1
-  fi
-
-  local analyzed_count failed_count index advisory analysis_file output_tmp analyses_json
-  analyzed_count=0
-  failed_count=0
-  index=0
-  analyses_json="$tmpdir/analyses.json"
-  output_tmp="$tmpdir/output_batch.json"
-
-  while IFS= read -r advisory; do
-    analysis_file="$tmpdir/analysis_${index}.json"
-    if run_analysis "$advisory" "batch" "$analysis_file"; then
-      analyzed_count=$((analyzed_count + 1))
-    else
-      failed_count=$((failed_count + 1))
-      rm -f "$analysis_file"
-    fi
-    index=$((index + 1))
-  done < <(jq -c '.[]' "$INPUT_PATH")
-
-  if ls "$tmpdir"/analysis_*.json >/dev/null 2>&1; then
-    jq -s '.' "$tmpdir"/analysis_*.json > "$analyses_json"
-  else
-    echo '[]' > "$analyses_json"
-  fi
-
-  jq --slurpfile analyses "$analyses_json" '
-    map(
-      . as $advisory |
-      ($analyses[0] | map(select(.cve_id == $advisory.id)) | first) as $analysis |
-      if $analysis then
-        $advisory + {
-          exploitability_score: $analysis.exploitability_score,
-          exploitability_rationale: $analysis.exploitability_rationale,
-          attack_vector_analysis: $analysis.attack_vector_analysis,
-          exploit_detection: $analysis.exploit_detection
-        }
-      else
-        $advisory
-      end
-    )
-  ' "$INPUT_PATH" > "$output_tmp"
-
-  mv "$output_tmp" "$OUTPUT_PATH"
-  echo "Exploitability enrichment complete (batch): $OUTPUT_PATH"
-  echo "Analyzed: $analyzed_count, failed: $failed_count"
-}
-
-if [[ "$MODE" == "single" ]]; then
-  enrich_single
-else
-  enrich_batch
-fi

scripts/ci/test_verify_skill_release_import_closure.py

@@ -1,111 +0,0 @@
-from __future__ import annotations
-
-import importlib.util
-import sys
-import tempfile
-import unittest
-from pathlib import Path
-
-
-def _load_module():
-    module_path = Path(__file__).with_name("verify_skill_release_import_closure.py")
-    spec = importlib.util.spec_from_file_location("verify_skill_release_import_closure", module_path)
-    if spec is None or spec.loader is None:
-        raise RuntimeError(f"Unable to load {module_path}")
-    module = importlib.util.module_from_spec(spec)
-    sys.modules[spec.name] = module
-    spec.loader.exec_module(module)
-    return module
-
-
-class VerifySkillReleaseImportClosureTests(unittest.TestCase):
-    @classmethod
-    def setUpClass(cls) -> None:
-        cls.module = _load_module()
-
-    def test_empty_directory_does_not_satisfy_relative_import(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            (root / "runtime-lib").mkdir()
-            (root / "main.mjs").write_text("import './runtime-lib';\n", encoding="utf-8")
-
-            failures = self.module.verify_import_closure(root)
-
-            self.assertEqual(len(failures), 1)
-            self.assertIn("main.mjs imports ./runtime-lib", failures[0])
-
-    def test_directory_import_requires_index_file(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            runtime_lib = root / "runtime-lib"
-            runtime_lib.mkdir()
-            (runtime_lib / "index.mjs").write_text("export {};\n", encoding="utf-8")
-            (root / "main.mjs").write_text("import './runtime-lib';\n", encoding="utf-8")
-
-            failures = self.module.verify_import_closure(root)
-
-            self.assertEqual(failures, [])
-
-    def test_ts_source_accepts_js_import_specifier(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            (root / "types.ts").write_text("export type Value = string;\n", encoding="utf-8")
-            (root / "main.ts").write_text("import type { Value } from './types.js';\n", encoding="utf-8")
-
-            failures = self.module.verify_import_closure(root)
-
-            self.assertEqual(failures, [])
-
-    def test_comment_import_examples_are_ignored(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            (root / "main.ts").write_text(
-                "/*\n"
-                " * Example integration:\n"
-                " * import { Missing } from '../external/project/file';\n"
-                " */\n"
-                "export {};\n",
-                encoding="utf-8",
-            )
-
-            failures = self.module.verify_import_closure(root)
-
-            self.assertEqual(failures, [])
-
-    def test_url_string_does_not_hide_following_relative_import(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            (root / "main.ts").write_text(
-                'const feedUrl = "https://example.test/feed.json"; import value from "./missing.js";\n',
-                encoding="utf-8",
-            )
-
-            failures = self.module.verify_import_closure(root)
-
-            self.assertEqual(len(failures), 1)
-            self.assertIn("main.ts imports ./missing.js", failures[0])
-
-    def test_remote_import_spec_survives_comment_stripping(self) -> None:
-        source = 'import remote from "https://example.test/module.mjs";\n'
-        stripped = self.module.strip_js_ts_comments(source)
-
-        specs = [match.group("spec") for match in self.module.IMPORT_RE.finditer(stripped)]
-
-        self.assertEqual(specs, ["https://example.test/module.mjs"])
-
-    def test_remote_runtime_import_is_rejected(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            (root / "main.mjs").write_text(
-                'import remote from "https://example.test/module.mjs";\n',
-                encoding="utf-8",
-            )
-
-            failures = self.module.verify_import_closure(root)
-
-            self.assertEqual(len(failures), 1)
-            self.assertIn("remote runtime import https://example.test/module.mjs", failures[0])
-
-
-if __name__ == "__main__":
-    unittest.main()

scripts/ci/verify_signing_key_consistency.sh

@@ -71,14 +71,3 @@ if [[ "$CANONICAL_FPR" != "$DOC_EXPECTED_FPR" ]]; then
 fi
 
 echo "All signing key references are consistent: $CANONICAL_FPR"
-
-while IFS= read -r skill_md; do
-  while IFS= read -r doc_fpr; do
-    if [[ "$doc_fpr" != "$CANONICAL_FPR" ]]; then
-      echo "ERROR: $skill_md RELEASE_PUBKEY_SHA256 ($doc_fpr) != canonical fingerprint ($CANONICAL_FPR)" >&2
-      exit 1
-    fi
-  done < <(awk -F'"' '/RELEASE_PUBKEY_SHA256=/{print $2}' "$skill_md")
-done < <(find skills -mindepth 2 -maxdepth 2 -name SKILL.md -print | sort)
-
-echo "All skill doc RELEASE_PUBKEY_SHA256 references match the canonical signing key."

scripts/ci/verify_skill_release_import_closure.py

@@ -1,175 +0,0 @@
-#!/usr/bin/env python3
-"""Verify staged skill release JS/TS imports are self-contained.
-
-The skill release workflow builds archives from `skill.json.sbom.files`. If a
-runtime helper exists in the repo but is omitted from the SBOM, the staged
-release can contain files whose relative imports point at missing files or
-remote runtime imports. This script checks the staged payload, not the source
-tree, so it catches exactly what would ship.
-"""
-
-from __future__ import annotations
-
-import argparse
-import re
-import sys
-from pathlib import Path
-
-IMPORT_RE = re.compile(
-    r"(?:"
-    r"\bimport\s+(?:type\s+)?(?:[^'\";]+?\s+from\s+)?"
-    r"|\bexport\s+(?:type\s+)?[^'\";]+?\s+from\s+"
-    r"|\bimport\s*\(\s*"
-    r"|\brequire\s*\(\s*"
-    r")"
-    r"['\"](?P<spec>(?:\.{1,2}/|https?://)[^'\"]+)['\"]",
-    re.MULTILINE,
-)
-
-SOURCE_SUFFIXES = {".js", ".mjs", ".cjs", ".ts", ".mts", ".cts"}
-RESOLUTION_SUFFIXES = ["", ".mjs", ".js", ".cjs", ".mts", ".ts", ".cts", ".json"]
-INDEX_FILENAMES = ["index.mjs", "index.js", "index.cjs", "index.mts", "index.ts", "index.cts", "index.json"]
-TS_IMPORTER_SUFFIXES = {".ts", ".mts", ".cts"}
-JS_TO_TS_SUFFIX = {".js": ".ts", ".mjs": ".mts", ".cjs": ".cts"}
-
-
-def strip_js_ts_comments(text: str) -> str:
-    stripped: list[str] = []
-    state = "code"
-    i = 0
-
-    while i < len(text):
-        char = text[i]
-        next_char = text[i + 1] if i + 1 < len(text) else ""
-
-        if state == "line_comment":
-            if char in "\r\n":
-                stripped.append(char)
-                state = "code"
-            i += 1
-            continue
-
-        if state == "block_comment":
-            if char == "*" and next_char == "/":
-                state = "code"
-                i += 2
-                continue
-            if char in "\r\n":
-                stripped.append(char)
-            i += 1
-            continue
-
-        if state in {"single", "double", "template"}:
-            stripped.append(char)
-            if char == "\\" and i + 1 < len(text):
-                stripped.append(text[i + 1])
-                i += 2
-                continue
-            if (state == "single" and char == "'") or (state == "double" and char == '"') or (
-                state == "template" and char == "`"
-            ):
-                state = "code"
-            i += 1
-            continue
-
-        if char == "/" and next_char == "/":
-            stripped.append(" ")
-            state = "line_comment"
-            i += 2
-            continue
-        if char == "/" and next_char == "*":
-            stripped.append(" ")
-            state = "block_comment"
-            i += 2
-            continue
-
-        stripped.append(char)
-        if char == "'":
-            state = "single"
-        elif char == '"':
-            state = "double"
-        elif char == "`":
-            state = "template"
-        i += 1
-
-    return "".join(stripped)
-
-
-def is_remote_spec(spec: str) -> bool:
-    return spec.startswith(("http://", "https://"))
-
-
-def candidate_paths(importer: Path, spec: str) -> list[Path]:
-    base = (importer.parent / spec).resolve()
-    candidates = [base]
-    if importer.suffix in TS_IMPORTER_SUFFIXES and base.suffix in JS_TO_TS_SUFFIX:
-        candidates.append(base.with_suffix(JS_TO_TS_SUFFIX[base.suffix]))
-    candidates.extend(base.with_suffix(suffix) for suffix in RESOLUTION_SUFFIXES if suffix and base.suffix == "")
-    candidates.extend(base / name for name in INDEX_FILENAMES)
-    return candidates
-
-
-def is_within(path: Path, root: Path) -> bool:
-    try:
-        path.resolve().relative_to(root)
-        return True
-    except ValueError:
-        return False
-
-
-def is_resolved_file(candidate: Path, root: Path) -> bool:
-    return candidate.is_file() and is_within(candidate, root)
-
-
-def verify_import_closure(root: Path) -> list[str]:
-    root = root.resolve()
-    failures: list[str] = []
-
-    for source in sorted(p for p in root.rglob("*") if p.is_file() and p.suffix in SOURCE_SUFFIXES):
-        text = source.read_text(encoding="utf-8", errors="ignore")
-        text = strip_js_ts_comments(text)
-        for match in IMPORT_RE.finditer(text):
-            spec = match.group("spec")
-            rel_source = source.relative_to(root).as_posix()
-            if is_remote_spec(spec):
-                failures.append(f"{rel_source} imports remote runtime import {spec}")
-                continue
-
-            candidates = candidate_paths(source, spec)
-            if any(is_resolved_file(candidate, root) for candidate in candidates):
-                continue
-
-            display_target = (source.parent / spec).resolve()
-            try:
-                rel_target = display_target.relative_to(root).as_posix()
-            except ValueError:
-                rel_target = str(display_target)
-            failures.append(f"{rel_source} imports {spec} but {rel_target} is absent from staged release")
-
-    return failures
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser(description=__doc__)
-    parser.add_argument("staged_skill_dir", type=Path, help="Staged skill payload directory, e.g. $INNER_DIR")
-    args = parser.parse_args()
-
-    root = args.staged_skill_dir
-    if not root.is_dir():
-        print(f"error: staged skill directory not found: {root}", file=sys.stderr)
-        return 2
-
-    failures = verify_import_closure(root)
-    if failures:
-        print("Release import-closure check failed:", file=sys.stderr)
-        for failure in failures:
-            print(f"  - {failure}", file=sys.stderr)
-        print("Add the missing runtime file(s) to skill.json sbom.files or remove the stale import.", file=sys.stderr)
-        return 1
-
-    print(f"Release import-closure check OK: {root}")
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

scripts/feed-utils.sh

@@ -1,97 +0,0 @@
-#!/bin/bash
-# feed-utils.sh
-# Shared advisory feed path and sync helpers for local/maintenance scripts.
-
-init_feed_paths() {
-  local project_root="$1"
-
-  : "${FEED_PATH:=$project_root/advisories/feed.json}"
-  : "${SKILL_FEED_PATH:=$project_root/skills/clawsec-feed/advisories/feed.json}"
-  : "${PUBLIC_FEED_PATH:=$project_root/public/advisories/feed.json}"
-}
-
-sync_feed_to_mirrors() {
-  local source_feed="$1"
-  local mode="${2:-create}"
-
-  local target
-  for target in "$SKILL_FEED_PATH" "$PUBLIC_FEED_PATH"; do
-    case "$mode" in
-      create)
-        mkdir -p "$(dirname "$target")"
-        cp "$source_feed" "$target"
-        echo "✓ Updated: $target"
-        ;;
-      existing-only)
-        if [ -f "$target" ]; then
-          cp "$source_feed" "$target"
-          echo "✓ Updated: $target"
-        fi
-        ;;
-      *)
-        echo "Error: unsupported mirror sync mode: $mode" >&2
-        return 1
-        ;;
-    esac
-  done
-}
-
-nvd_query_specs() {
-  cat <<'EOF'
-keyword|OpenClaw
-keyword|clawdbot
-keyword|Moltbot
-keyword|NanoClaw
-keyword|WhatsApp-bot
-keyword|baileys
-keyword|hermes workflow
-keyword|hermes-agent
-keyword|Picoclaw
-virtualMatchString|cpe:2.3:a:software-metadata.pub:hermes
-virtualMatchString|cpe:2.3:a:picoclaw:picoclaw
-EOF
-}
-
-nvd_summary_keywords() {
-  echo 'openclaw, nanoclaw, hermes, picoclaw'
-}
-
-nvd_keyword_pattern() {
-  echo 'OpenClaw|clawdbot|Moltbot|openclaw|NanoClaw|nanoclaw|WhatsApp-bot|baileys|HERMES workflow|hermes-agent|software publication with rich metadata|Picoclaw|picoclaw'
-}
-
-nvd_github_ref_pattern() {
-  echo 'github\.com/openclaw/openclaw|github\.com/qwibitai/nanoclaw|github\.com/softwarepub/hermes|github\.com/nousresearch/hermes-agent|github\.com/[^/]+/picoclaw'
-}
-
-nvd_cpe_pattern() {
-  echo 'cpe:2\.3:a:software-metadata\.pub:hermes(?::|$)|cpe:2\.3:[aho]:[^:]*:picoclaw(?::|$)'
-}
-
-nvd_query_slug() {
-  local kind="$1"
-  local value="$2"
-  printf '%s__%s' "$kind" "$value" | tr '[:upper:]' '[:lower:]' | sed 's/[^a-z0-9._-]/_/g'
-}
-
-nvd_build_url() {
-  local kind="$1"
-  local value="$2"
-  local suffix="${3:-}"
-  local encoded
-
-  encoded=$(jq -nr --arg v "$value" '$v|@uri')
-
-  case "$kind" in
-    keyword)
-      printf 'https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=%s%s' "$encoded" "$suffix"
-      ;;
-    virtualMatchString)
-      printf 'https://services.nvd.nist.gov/rest/json/cves/2.0?virtualMatchString=%s%s' "$encoded" "$suffix"
-      ;;
-    *)
-      echo "Error: unsupported NVD query kind: $kind" >&2
-      return 1
-      ;;
-  esac
-}

scripts/generate-wiki-llms.mjs

@@ -1,145 +0,0 @@
-#!/usr/bin/env node
-
-import { promises as fs } from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import {
-  extractTitleFromMarkdown,
-  stripFrontmatter,
-} from '../utils/markdownHelpers.mjs';
-import {
-  isWikiIndexSlug,
-  toWikiLlmsPath,
-  toWikiRoute,
-} from '../utils/wikiPathHelpers.mjs';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const REPO_ROOT = path.resolve(__dirname, '..');
-const WIKI_ROOT = path.join(REPO_ROOT, 'wiki');
-const PUBLIC_WIKI_ROOT = path.join(REPO_ROOT, 'public', 'wiki');
-const LLM_INDEX_FILE = path.join(PUBLIC_WIKI_ROOT, 'llms.txt');
-
-const WEBSITE_BASE = 'https://clawsec.prompt.security';
-const REPO_BASE = 'https://github.com/prompt-security/clawsec';
-const RAW_BASE = 'https://raw.githubusercontent.com/prompt-security/clawsec/main';
-
-const toPosix = (inputPath) => inputPath.split(path.sep).join('/');
-const toLlmsPageUrl = (slug) => `${WEBSITE_BASE}${toWikiLlmsPath(slug)}`;
-
-const walkMarkdownFiles = async (dir) => {
-  const entries = await fs.readdir(dir, { withFileTypes: true });
-  const files = [];
-
-  for (const entry of entries) {
-    const fullPath = path.join(dir, entry.name);
-    if (entry.isDirectory()) {
-      const nested = await walkMarkdownFiles(fullPath);
-      files.push(...nested);
-      continue;
-    }
-    if (entry.isFile() && entry.name.toLowerCase().endsWith('.md')) {
-      files.push(fullPath);
-    }
-  }
-
-  return files;
-};
-
-const sortDocs = (a, b) => {
-  if (a.slug === 'index' && b.slug !== 'index') return -1;
-  if (a.slug !== 'index' && b.slug === 'index') return 1;
-  return a.slug.localeCompare(b.slug, 'en', { sensitivity: 'base' });
-};
-
-const buildPageBody = (doc) => {
-  const pageRoute = toWikiRoute(doc.slug);
-  const pageUrl = `${WEBSITE_BASE}/#${pageRoute}`;
-  const sourceUrl = `${RAW_BASE}/wiki/${doc.relativePath}`;
-  const llmsUrl = toLlmsPageUrl(doc.slug);
-
-  return [
-    `# ClawSec Wiki · ${doc.title}`,
-    '',
-    'LLM-ready export for a single wiki page.',
-    '',
-    '## Canonical',
-    `- Wiki page: ${pageUrl}`,
-    `- LLM export: ${llmsUrl}`,
-    `- Source markdown: ${sourceUrl}`,
-    '',
-    '## Markdown',
-    '',
-    doc.content.trim(),
-    '',
-  ].join('\n');
-};
-
-const buildFallbackIndexBody = (docs) => {
-  const lines = [
-    '# ClawSec Wiki llms.txt',
-    '',
-    'LLM-readable index for wiki pages.',
-    '',
-    `Website wiki root: ${WEBSITE_BASE}/#/wiki`,
-    `GitHub wiki mirror: ${REPO_BASE}/wiki`,
-    `Canonical source of truth: ${REPO_BASE}/tree/main/wiki`,
-    '',
-    '## Generated Page Exports',
-  ];
-
-  for (const doc of docs) {
-    const pageRoute = toWikiRoute(doc.slug);
-    const pageUrl = `${WEBSITE_BASE}/#${pageRoute}`;
-    const llmsUrl = toLlmsPageUrl(doc.slug);
-    lines.push(`- ${doc.title}: ${llmsUrl} (page: ${pageUrl})`);
-  }
-
-  return `${lines.join('\n')}\n`;
-};
-
-const main = async () => {
-  try {
-    const wikiStat = await fs.stat(WIKI_ROOT).catch(() => null);
-    if (!wikiStat || !wikiStat.isDirectory()) {
-      throw new Error('wiki/ directory not found.');
-    }
-
-    const markdownFiles = await walkMarkdownFiles(WIKI_ROOT);
-    const docs = [];
-
-    for (const fullPath of markdownFiles) {
-      const relativePath = toPosix(path.relative(WIKI_ROOT, fullPath));
-      const slug = relativePath.replace(/\.md$/i, '').toLowerCase();
-      const rawContent = await fs.readFile(fullPath, 'utf8');
-      const content = stripFrontmatter(rawContent);
-      const title = extractTitleFromMarkdown(rawContent, relativePath);
-      docs.push({ relativePath, slug, title, content });
-    }
-
-    docs.sort(sortDocs);
-    const pageDocs = docs.filter((doc) => !isWikiIndexSlug(doc.slug));
-    const indexDoc = docs.find((doc) => isWikiIndexSlug(doc.slug));
-
-    // `public/wiki/` is fully generated; wipe stale output before regenerating.
-    await fs.rm(PUBLIC_WIKI_ROOT, { recursive: true, force: true });
-    await fs.mkdir(PUBLIC_WIKI_ROOT, { recursive: true });
-
-    for (const doc of pageDocs) {
-      const outputFile = path.join(PUBLIC_WIKI_ROOT, doc.slug, 'llms.txt');
-      await fs.mkdir(path.dirname(outputFile), { recursive: true });
-      await fs.writeFile(outputFile, buildPageBody(doc), 'utf8');
-    }
-
-    const indexBody = indexDoc ? buildPageBody(indexDoc) : buildFallbackIndexBody(pageDocs);
-    await fs.writeFile(LLM_INDEX_FILE, indexBody, 'utf8');
-
-    // Keep logs short for CI readability.
-    console.log(`Generated ${pageDocs.length} page llms.txt exports and /wiki/llms.txt`);
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    console.error(`Failed to generate wiki llms exports: ${message}`);
-    process.exit(1);
-  }
-};
-
-await main();

scripts/ghsa-without-cve-feed.mjs

@@ -1,514 +0,0 @@
-#!/usr/bin/env node
-
-import { existsSync } from 'node:fs';
-import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
-import { dirname } from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-export const DEFAULT_REPOSITORIES = [
-  'openclaw/openclaw',
-  'qwibitai/nanoclaw',
-  'softwarepub/hermes',
-  'nousresearch/hermes-agent',
-  'sipeed/picoclaw',
-];
-
-export const DEFAULT_STALE_AFTER_DAYS = 60;
-export const FEED_VERSION = '0.1.0';
-
-const PLATFORM_BY_REPOSITORY = new Map([
-  ['openclaw/openclaw', 'openclaw'],
-  ['qwibitai/nanoclaw', 'nanoclaw'],
-  ['softwarepub/hermes', 'hermes'],
-  ['nousresearch/hermes-agent', 'hermes'],
-  ['sipeed/picoclaw', 'picoclaw'],
-]);
-
-const CWE_TYPE_BY_ID = new Map([
-  ['CWE-22', 'path_traversal'],
-  ['CWE-78', 'os_command_injection'],
-  ['CWE-79', 'cross_site_scripting'],
-  ['CWE-94', 'code_injection'],
-  ['CWE-200', 'exposure_of_sensitive_information'],
-  ['CWE-284', 'improper_access_control'],
-  ['CWE-287', 'improper_authentication'],
-  ['CWE-306', 'missing_authentication_for_critical_function'],
-  ['CWE-352', 'cross_site_request_forgery'],
-  ['CWE-400', 'uncontrolled_resource_consumption'],
-  ['CWE-502', 'deserialization_of_untrusted_data'],
-  ['CWE-862', 'missing_authorization'],
-  ['CWE-863', 'incorrect_authorization'],
-  ['CWE-918', 'server_side_request_forgery'],
-]);
-
-function cleanText(value) {
-  return String(value ?? '')
-    .replace(/\r/g, '')
-    .replace(/```[\s\S]*?```/g, ' ')
-    .replace(/`([^`]+)`/g, '$1')
-    .replace(/\[([^\]]+)\]\([^)]+\)/g, '$1')
-    .replace(/^#+\s+/gm, '')
-    .replace(/[*_>]/g, '')
-    .replace(/\s+/g, ' ')
-    .trim();
-}
-
-function daysBetween(startIso, endIso) {
-  const start = Date.parse(startIso);
-  const end = Date.parse(endIso);
-  if (!Number.isFinite(start) || !Number.isFinite(end) || end < start) {
-    return 0;
-  }
-  return Math.floor((end - start) / 86_400_000);
-}
-
-function toArray(value) {
-  return Array.isArray(value) ? value : [];
-}
-
-function uniqueStrings(values) {
-  return [...new Set(values.filter((value) => typeof value === 'string' && value.length > 0))];
-}
-
-export function inferPlatforms(repository) {
-  const known = PLATFORM_BY_REPOSITORY.get(String(repository).toLowerCase());
-  return known ? [known] : [];
-}
-
-function nextLinkFromHeader(linkHeader) {
-  if (!linkHeader) {
-    return null;
-  }
-  for (const part of linkHeader.split(',')) {
-    const match = part.trim().match(/^<([^>]+)>;\s*rel="next"$/);
-    if (match) {
-      return match[1];
-    }
-  }
-  return null;
-}
-
-function affectedFromVulnerabilities(advisory, platforms) {
-  const affected = toArray(advisory.vulnerabilities).flatMap((vulnerability) => {
-    const packageName = vulnerability?.package?.name;
-    const versionRange = vulnerability?.vulnerable_version_range;
-    if (!packageName) {
-      return [];
-    }
-    return [`${packageName}@${versionRange || '*'}`];
-  });
-
-  if (affected.length > 0) {
-    return uniqueStrings(affected);
-  }
-
-  return platforms.length > 0 ? platforms.map((platform) => `${platform}@*`) : [];
-}
-
-function patchedFromVulnerabilities(advisory) {
-  return uniqueStrings(
-    toArray(advisory.vulnerabilities).flatMap((vulnerability) => {
-      const packageName = vulnerability?.package?.name;
-      const patchedVersions = vulnerability?.patched_versions;
-      if (!packageName || !patchedVersions) {
-        return [];
-      }
-      return [`${packageName}@${patchedVersions}`];
-    }),
-  );
-}
-
-function githubAdvisoryUrl(advisory) {
-  return advisory.html_url || advisory.url || `https://github.com/advisories/${advisory.ghsa_id}`;
-}
-
-function resolveCveId(advisory, cveIdByGhsa) {
-  return advisory.cve_id || cveIdByGhsa.get(advisory.ghsa_id) || null;
-}
-
-export function normalizeGhsaAdvisory(
-  advisory,
-  {
-    now,
-    repository,
-    staleAfterDays = DEFAULT_STALE_AFTER_DAYS,
-    cveId = advisory.cve_id || null,
-  },
-) {
-  const platforms = inferPlatforms(repository);
-  const published = advisory.published_at || advisory.created_at || advisory.updated_at || now;
-  const ageDays = daysBetween(published, now);
-  const stale = !cveId && ageDays >= staleAfterDays;
-  const status = cveId ? 'matured' : stale ? 'stale' : 'active';
-  const cweIds = uniqueStrings(toArray(advisory.cwe_ids));
-  const cvss = advisory.cvss || advisory.cvss_severities?.cvss_v3 || {};
-  const ghsaUrl = githubAdvisoryUrl(advisory);
-  const affected = affectedFromVulnerabilities(advisory, platforms);
-  const patched = patchedFromVulnerabilities(advisory);
-  const title = cleanText(advisory.summary) || advisory.ghsa_id;
-  const description = cleanText(advisory.description) || title;
-
-  return {
-    id: advisory.ghsa_id,
-    ghsa_id: advisory.ghsa_id,
-    cve_id: cveId,
-    status,
-    stale,
-    stale_after_days: staleAfterDays,
-    severity: advisory.severity || 'medium',
-    type: CWE_TYPE_BY_ID.get(cweIds[0]) || 'github_security_advisory',
-    nvd_category_id: cweIds[0] || null,
-    title,
-    description,
-    affected,
-    patched,
-    platforms,
-    action: cveId
-      ? `Track ${cveId} in the canonical CVE advisory feed and verify affected components.`
-      : 'Review the GitHub Security Advisory and update affected components; no CVE is assigned yet.',
-    published,
-    updated: advisory.updated_at || published,
-    references: uniqueStrings([ghsaUrl, cveId ? `https://nvd.nist.gov/vuln/detail/${cveId}` : null]),
-    source: 'GitHub Security Advisory',
-    repository,
-    github_advisory_url: ghsaUrl,
-    nvd_url: cveId ? `https://nvd.nist.gov/vuln/detail/${cveId}` : null,
-    cvss_score: cvss.score ?? null,
-    cvss_vector: cvss.vector_string ?? null,
-    cwe_ids: cweIds,
-    credits: uniqueStrings(toArray(advisory.credits).map((credit) => credit?.login)),
-    aliases: uniqueStrings([advisory.ghsa_id, cveId]),
-  };
-}
-
-function ghsaToCveMapFromNvdFeed(nvdFeed) {
-  const map = new Map();
-  for (const advisory of toArray(nvdFeed?.advisories)) {
-    const cveId = advisory?.id;
-    if (typeof cveId !== 'string' || !cveId.startsWith('CVE-')) {
-      continue;
-    }
-    const references = toArray(advisory.references).join('\n');
-    for (const match of references.matchAll(/GHSA-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}/gi)) {
-      map.set(match[0], cveId);
-    }
-  }
-  return map;
-}
-
-function equivalentAdvisories(left, right) {
-  return JSON.stringify(left ?? []) === JSON.stringify(right ?? []);
-}
-
-function isCveId(value) {
-  return typeof value === 'string' && /^CVE-\d{4}-\d{4,}$/i.test(value);
-}
-
-function ghsaIdentifier(entry) {
-  if (typeof entry?.ghsa_id === 'string' && entry.ghsa_id.length > 0) {
-    return entry.ghsa_id.toLowerCase();
-  }
-  if (/^GHSA-/i.test(String(entry?.id || ''))) {
-    return String(entry.id).toLowerCase();
-  }
-  return null;
-}
-
-function refreshExistingEntry(entry, { now, staleAfterDays, cveIdByGhsa }) {
-  const cveId = entry.cve_id || cveIdByGhsa.get(entry.ghsa_id || entry.id) || null;
-  const ageDays = daysBetween(entry.published, now);
-  const stale = !cveId && ageDays >= staleAfterDays;
-  return {
-    ...entry,
-    cve_id: cveId,
-    status: cveId ? 'matured' : stale ? 'stale' : 'active',
-    stale,
-    stale_after_days: staleAfterDays,
-    references: uniqueStrings([
-      ...toArray(entry.references),
-      cveId ? `https://nvd.nist.gov/vuln/detail/${cveId}` : null,
-    ]),
-    nvd_url: cveId ? `https://nvd.nist.gov/vuln/detail/${cveId}` : null,
-    aliases: uniqueStrings([...(entry.aliases || []), entry.ghsa_id || entry.id, cveId]),
-  };
-}
-
-export function buildConsolidatedAdvisoryFeed({ canonicalFeed = {}, ghsaFeed = {}, now }) {
-  const canonicalFeedEntries = toArray(canonicalFeed.advisories);
-  const canonicalCveIds = new Set(canonicalFeedEntries.map((entry) => entry?.id).filter(isCveId));
-  const replacementGhsaIds = new Set(toArray(ghsaFeed.advisories).map(ghsaIdentifier).filter(Boolean));
-  const canonicalEntries = canonicalFeedEntries.filter((entry) => {
-    const ghsaId = ghsaIdentifier(entry);
-    if (!ghsaId) {
-      return true;
-    }
-    if (entry?.cve_id && canonicalCveIds.has(entry.cve_id)) {
-      return false;
-    }
-    return !replacementGhsaIds.has(ghsaId);
-  });
-  const ghsaEntries = toArray(ghsaFeed.advisories)
-    .filter((entry) => !(entry?.cve_id && canonicalCveIds.has(entry.cve_id)))
-    .map((entry) => ({
-      ...entry,
-      source_feed: 'ghsa-without-cve',
-    }));
-
-  const advisories = [...canonicalEntries, ...ghsaEntries].sort((a, b) => {
-    const published = Date.parse(b.published || '') - Date.parse(a.published || '');
-    if (Number.isFinite(published) && published !== 0) {
-      return published;
-    }
-    return String(a.id || '').localeCompare(String(b.id || ''));
-  });
-
-  return {
-    ...canonicalFeed,
-    version: canonicalFeed.version || '1.0.0',
-    updated: canonicalFeed.updated || now,
-    description: canonicalFeed.description || 'Community-driven security advisory feed for ClawSec',
-    advisories,
-  };
-}
-
-export function buildGhsaWithoutCveFeed({
-  fetched,
-  existingFeed = {},
-  nvdFeed = {},
-  now,
-  staleAfterDays = DEFAULT_STALE_AFTER_DAYS,
-}) {
-  const existingEntries = toArray(existingFeed.advisories);
-  const existingIds = new Set(existingEntries.map((entry) => entry.ghsa_id || entry.id));
-  const cveIdByGhsa = ghsaToCveMapFromNvdFeed(nvdFeed);
-  const entriesById = new Map();
-
-  for (const { repository, advisories } of fetched) {
-    for (const advisory of advisories) {
-      const ghsaId = advisory.ghsa_id;
-      if (!ghsaId) {
-        continue;
-      }
-      const cveId = resolveCveId(advisory, cveIdByGhsa);
-      if (cveId && !existingIds.has(ghsaId)) {
-        continue;
-      }
-      entriesById.set(
-        ghsaId,
-        normalizeGhsaAdvisory(advisory, {
-          now,
-          repository,
-          staleAfterDays,
-          cveId,
-        }),
-      );
-    }
-  }
-
-  for (const entry of existingEntries) {
-    const ghsaId = entry.ghsa_id || entry.id;
-    if (!ghsaId || entriesById.has(ghsaId)) {
-      continue;
-    }
-    entriesById.set(ghsaId, refreshExistingEntry(entry, { now, staleAfterDays, cveIdByGhsa }));
-  }
-
-  const advisories = [...entriesById.values()].sort((a, b) => {
-    const published = Date.parse(b.published) - Date.parse(a.published);
-    if (published !== 0) {
-      return published;
-    }
-    return a.id.localeCompare(b.id);
-  });
-
-  const updated = equivalentAdvisories(advisories, existingEntries)
-    ? existingFeed.updated || now
-    : now;
-
-  return {
-    version: FEED_VERSION,
-    updated,
-    description:
-      'Provisional ClawSec advisory feed for public GitHub Security Advisories that do not yet have CVE identifiers.',
-    stale_after_days: staleAfterDays,
-    semantics: {
-      active: 'GHSA is published and has no CVE identifier yet.',
-      matured: 'GHSA now has a CVE identifier and should be reconciled with the canonical CVE feed.',
-      stale: 'GHSA is older than stale_after_days and still has no CVE identifier.',
-    },
-    sources: DEFAULT_REPOSITORIES.map((repository) => ({
-      repository,
-      platform: inferPlatforms(repository)[0] || 'unknown',
-      url: `https://github.com/${repository}/security/advisories`,
-    })),
-    advisories,
-  };
-}
-
-export async function fetchGitHubSecurityAdvisories(repository, { token } = {}) {
-  const advisories = [];
-  let url = `https://api.github.com/repos/${repository}/security-advisories?per_page=100`;
-  const seenUrls = new Set();
-
-  while (url) {
-    if (seenUrls.has(url)) {
-      throw new Error(`GitHub advisory pagination loop detected for ${repository}: ${url}`);
-    }
-    seenUrls.add(url);
-
-    const response = await globalThis.fetch(url, {
-      headers: {
-        Accept: 'application/vnd.github+json',
-        'User-Agent': 'clawsec-ghsa-without-cve-poller',
-        'X-GitHub-Api-Version': '2022-11-28',
-        ...(token ? { Authorization: `Bearer ${token}` } : {}),
-      },
-    });
-
-    if (!response.ok) {
-      const message = await response.text();
-      throw new Error(
-        `GitHub advisory fetch failed for ${repository}: HTTP ${response.status} ${message.slice(0, 200)}`,
-      );
-    }
-
-    const pageItems = await response.json();
-    advisories.push(...pageItems);
-    if (!Array.isArray(pageItems)) {
-      break;
-    }
-    url = nextLinkFromHeader(response.headers.get('link'));
-  }
-  return advisories;
-}
-
-async function readJsonIfExists(path, fallback) {
-  if (!existsSync(path)) {
-    return fallback;
-  }
-  return JSON.parse(await readFile(path, 'utf8'));
-}
-
-async function writeJson(path, value) {
-  await mkdir(dirname(path), { recursive: true });
-  await writeFile(`${path}.tmp`, `${JSON.stringify(value, null, 2)}\n`);
-  await rename(`${path}.tmp`, path);
-}
-
-function parseArgs(argv) {
-  const options = {
-    output: 'advisories/ghsa-without-cve.json',
-    consolidatedFeed: null,
-    existingFeed: null,
-    nvdFeed: 'advisories/feed.json',
-    repositories: [...DEFAULT_REPOSITORIES],
-    staleAfterDays: DEFAULT_STALE_AFTER_DAYS,
-    token: process.env.GITHUB_TOKEN || process.env.GH_TOKEN || '',
-  };
-
-  for (let index = 0; index < argv.length; index += 1) {
-    const arg = argv[index];
-    if (arg === '--output') {
-      options.output = argv[++index];
-    } else if (arg === '--consolidated-feed') {
-      options.consolidatedFeed = argv[++index];
-    } else if (arg === '--existing-feed') {
-      options.existingFeed = argv[++index];
-    } else if (arg === '--nvd-feed') {
-      options.nvdFeed = argv[++index];
-    } else if (arg === '--repo') {
-      options.repositories.push(argv[++index]);
-    } else if (arg === '--only-default-repos') {
-      options.repositories = [...DEFAULT_REPOSITORIES];
-    } else if (arg === '--stale-after-days') {
-      options.staleAfterDays = Number.parseInt(argv[++index], 10);
-    } else if (arg === '--help') {
-      options.help = true;
-    } else {
-      throw new Error(`Unknown argument: ${arg}`);
-    }
-  }
-
-  if (!Number.isInteger(options.staleAfterDays) || options.staleAfterDays < 1) {
-    throw new Error('--stale-after-days must be a positive integer');
-  }
-
-  options.repositories = uniqueStrings(options.repositories.map((repo) => repo.toLowerCase()));
-  options.existingFeed ||= options.output;
-  return options;
-}
-
-function printHelp() {
-  console.log(`Usage: node scripts/ghsa-without-cve-feed.mjs [options]
-
-Options:
-  --output PATH             Feed output path (default: advisories/ghsa-without-cve.json)
-  --consolidated-feed PATH  Also merge active GHSA advisories into agent-facing feed PATH
-  --existing-feed PATH      Existing provisional feed path (default: output path)
-  --nvd-feed PATH           Canonical CVE feed path for GHSA-to-CVE reconciliation
-  --repo OWNER/NAME         Additional repository to poll
-  --only-default-repos      Reset repository list to built-in ClawSec sources
-  --stale-after-days N      Mark GHSA-only advisories stale after N days (default: 60)
-`);
-}
-
-async function main() {
-  const options = parseArgs(process.argv.slice(2));
-  if (options.help) {
-    printHelp();
-    return;
-  }
-
-  const now = new Date().toISOString().replace(/\.\d{3}Z$/, 'Z');
-  const fetched = [];
-  for (const repository of options.repositories) {
-    const advisories = await fetchGitHubSecurityAdvisories(repository, { token: options.token });
-    console.log(`Fetched ${advisories.length} GitHub Security Advisories from ${repository}`);
-    fetched.push({ repository, advisories });
-  }
-
-  const existingFeed = await readJsonIfExists(options.existingFeed, {});
-  const nvdFeed = await readJsonIfExists(options.nvdFeed, { advisories: [] });
-  const feed = buildGhsaWithoutCveFeed({
-    fetched,
-    existingFeed,
-    nvdFeed,
-    now,
-    staleAfterDays: options.staleAfterDays,
-  });
-
-  await writeJson(options.output, feed);
-  console.log(`Wrote ${feed.advisories.length} provisional GHSA advisories to ${options.output}`);
-
-  if (options.consolidatedFeed) {
-    const canonicalFeed = await readJsonIfExists(options.consolidatedFeed, {
-      version: '1.0.0',
-      advisories: [],
-    });
-    const consolidatedFeed = buildConsolidatedAdvisoryFeed({
-      canonicalFeed,
-      ghsaFeed: feed,
-      now,
-    });
-    await writeJson(options.consolidatedFeed, consolidatedFeed);
-    console.log(
-      `Wrote ${consolidatedFeed.advisories.length} consolidated agent advisories to ${options.consolidatedFeed}`,
-    );
-  }
-
-  console.log(
-    `Status counts: ${JSON.stringify(
-      feed.advisories.reduce((counts, advisory) => {
-        counts[advisory.status] = (counts[advisory.status] || 0) + 1;
-        return counts;
-      }, {}),
-    )}`,
-  );
-}
-
-if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
-  main().catch((error) => {
-    console.error(error);
-    process.exit(1);
-  });
-}

scripts/i18n/bootstrap_language_from_en.py

@@ -1,90 +0,0 @@
-#!/usr/bin/env python3
-"""Create missing translated wiki pages from English source.
-
-Usage:
-  python scripts/i18n/bootstrap_language_from_en.py --lang ko
-  python scripts/i18n/bootstrap_language_from_en.py --lang ko --dry-run
-  python scripts/i18n/bootstrap_language_from_en.py --lang ko --overwrite
-"""
-
-from __future__ import annotations
-
-import argparse
-from pathlib import Path
-
-SKIP_TOP_LEVEL_DIRS = {"assets", "i18n", "modules"}
-
-
-def build_header(lang: str, rel_path: str) -> str:
-    return (
-        f"<!-- AUTO-GENERATED TRANSLATION SCAFFOLD ({lang})\n"
-        f"Source: ../{rel_path}\n"
-        "Review status: draft\n"
-        "-->\n\n"
-    )
-
-
-def discover_source_pages(wiki_root: Path, lang_dirs: set[str]) -> list[Path]:
-    pages: list[Path] = []
-    for page in wiki_root.rglob("*.md"):
-        rel = page.relative_to(wiki_root)
-        if not rel.parts:
-            continue
-        first = rel.parts[0]
-        if first in SKIP_TOP_LEVEL_DIRS or first in lang_dirs:
-            continue
-        pages.append(page)
-    return sorted(pages)
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser()
-    parser.add_argument("--lang", required=True, help="language code, e.g. ko, es, fr")
-    parser.add_argument("--dry-run", action="store_true")
-    parser.add_argument("--overwrite", action="store_true")
-    args = parser.parse_args()
-
-    repo_root = Path(__file__).resolve().parents[2]
-    wiki_root = repo_root / "wiki"
-    target_root = wiki_root / args.lang
-
-    lang_dirs = {
-        p.name
-        for p in wiki_root.iterdir()
-        if p.is_dir() and (p / "INDEX.md").exists() and p.name not in SKIP_TOP_LEVEL_DIRS
-    }
-
-    source_pages = discover_source_pages(wiki_root, lang_dirs)
-    created = 0
-    skipped = 0
-    overwritten = 0
-
-    for src in source_pages:
-        rel = src.relative_to(wiki_root)
-        dst = target_root / rel
-        existed_before = dst.exists()
-
-        if existed_before and not args.overwrite:
-            skipped += 1
-            continue
-
-        src_text = src.read_text(encoding="utf-8")
-        header = build_header(args.lang, rel.as_posix())
-        out = header + src_text
-
-        if not args.dry_run:
-            dst.parent.mkdir(parents=True, exist_ok=True)
-            dst.write_text(out, encoding="utf-8")
-
-        if existed_before:
-            overwritten += 1
-        else:
-            created += 1
-
-    mode = "DRY-RUN" if args.dry_run else "WRITE"
-    print(f"[{mode}] lang={args.lang} source_pages={len(source_pages)} created={created} overwritten={overwritten} skipped={skipped}")
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

scripts/i18n/fill_missing_translations_argos.py

@@ -1,207 +0,0 @@
-#!/usr/bin/env python3
-from __future__ import annotations
-
-import argparse
-import re
-from collections.abc import Iterable
-from pathlib import Path
-
-from argostranslate import translate
-
-RE_INLINE_CODE = re.compile(r"`[^`]*`")
-RE_MD_LINK = re.compile(r"\[[^\]]*\]\([^\)]*\)")
-ENGLISH_HINTS = {
-    "a",
-    "an",
-    "and",
-    "are",
-    "as",
-    "at",
-    "be",
-    "before",
-    "by",
-    "for",
-    "from",
-    "if",
-    "in",
-    "is",
-    "of",
-    "on",
-    "or",
-    "the",
-    "this",
-    "to",
-    "use",
-    "using",
-    "when",
-    "with",
-    "you",
-    "your",
-}
-
-
-def _protect_tokens(line: str) -> tuple[str, dict[str, str]]:
-    mapping: dict[str, str] = {}
-    idx = 0
-
-    def repl(pattern: re.Pattern[str], text: str) -> str:
-        nonlocal idx
-
-        def _r(m: re.Match[str]) -> str:
-            nonlocal idx
-            key = f"ZXQTOKEN{idx}QXZ"
-            idx += 1
-            mapping[key] = m.group(0)
-            return key
-
-        return pattern.sub(_r, text)
-
-    out = line
-    out = repl(RE_MD_LINK, out)
-    out = repl(RE_INLINE_CODE, out)
-    return out, mapping
-
-
-def _restore_tokens(line: str, mapping: dict[str, str]) -> str:
-    out = line
-    for key, value in mapping.items():
-        out = out.replace(key, value)
-
-        old_style = re.fullmatch(r"__TOK_(\d+)__", key)
-        if old_style:
-            idx = old_style.group(1)
-            out = re.sub(rf"_{{1,2}}TOK_{idx}_{{1,2}}", value, out)
-            continue
-
-        new_style = re.fullmatch(r"ZXQTOKEN(\d+)QXZ", key)
-        if new_style:
-            idx = new_style.group(1)
-            out = re.sub(rf"ZXQTOKEN{idx}\s+QXZ", value, out)
-    return out
-
-
-def _should_translate(line: str) -> bool:
-    s = line.strip()
-    if not s:
-        return False
-    if s.startswith("<!--") or s.endswith("-->"):
-        return False
-    return True
-
-
-def _translate_line(tr, line: str) -> str:
-    protected, mapping = _protect_tokens(line)
-    translated = tr.translate(protected)
-    restored = _restore_tokens(translated, mapping)
-    return restored
-
-
-def _normalize_line(line: str) -> str:
-    return re.sub(r"\s+", " ", line.strip())
-
-
-def _looks_like_english(line: str) -> bool:
-    words = re.findall(r"[A-Za-z]+", line.lower())
-    if not words:
-        return False
-    hint_count = sum(1 for word in words if word in ENGLISH_HINTS)
-    return hint_count >= 2
-
-
-def _should_process_target_line(target_line: str, source_lines: set[str]) -> bool:
-    normalized = _normalize_line(target_line)
-    return normalized in source_lines or _looks_like_english(target_line)
-
-
-def _process_pair(source: Path, target: Path, tr) -> int:
-    src_lines = source.read_text(encoding="utf-8").splitlines()
-    src_set = {_normalize_line(line) for line in src_lines if line.strip()}
-    tgt_lines = target.read_text(encoding="utf-8").splitlines()
-    changed = 0
-    in_code = False
-
-    for i, tgt in enumerate(tgt_lines):
-        if tgt.strip().startswith("```"):
-            in_code = not in_code
-            continue
-        if in_code:
-            continue
-
-        # Only fill lines that are still unchanged or visibly retain English fragments.
-        if not _should_process_target_line(tgt, src_set):
-            continue
-        if not _should_translate(tgt):
-            continue
-
-        new = _translate_line(tr, tgt)
-        if new and new != tgt:
-            tgt_lines[i] = new
-            changed += 1
-
-    if changed:
-        target.write_text("\n".join(tgt_lines) + "\n", encoding="utf-8")
-    return changed
-
-
-def _normalize_only(values: Iterable[str] | None) -> set[str]:
-    normalized: set[str] = set()
-    for value in values or []:
-        item = value.strip().replace("\\", "/")
-        if not item:
-            continue
-        normalized.add(item)
-        normalized.add(Path(item).name)
-    return normalized
-
-
-def _matches_only(path: Path, repo: Path, only: set[str]) -> bool:
-    if not only:
-        return True
-
-    rel = path.relative_to(repo).as_posix()
-    candidates = {path.name, rel}
-    return bool(candidates & only)
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser()
-    parser.add_argument("--lang", required=True, choices=["de", "es", "fr", "ja", "ko"])
-    parser.add_argument(
-        "--only",
-        nargs="*",
-        default=None,
-        help="Optional list of target markdown filenames to process (e.g. README.ja.md overview.md security.md)",
-    )
-    args = parser.parse_args()
-
-    repo = Path(__file__).resolve().parents[2]
-    tr = translate.get_translation_from_codes("en", args.lang)
-    if tr is None:
-        raise SystemExit(f"Missing Argos en->{args.lang} model. Install first.")
-
-    total = 0
-
-    only = _normalize_only(args.only)
-
-    # README
-    readme_target = repo / f"README.{args.lang}.md"
-    if _matches_only(readme_target, repo, only):
-        total += _process_pair(repo / "README.md", readme_target, tr)
-
-    # wiki/<lang>
-    lang_root = repo / "wiki" / args.lang
-    for lang_file in sorted(lang_root.glob("*.md")):
-        if not _matches_only(lang_file, repo, only):
-            continue
-        if lang_file.name in {"INDEX.md", "GENERATION.md"}:
-            continue
-        src = repo / "wiki" / lang_file.name
-        if src.exists():
-            total += _process_pair(src, lang_file, tr)
-
-    print(f"Updated translated lines for {args.lang}: {total}")
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

scripts/i18n/link_check.py

@@ -1,98 +0,0 @@
-#!/usr/bin/env python3
-from __future__ import annotations
-
-import argparse
-import re
-import subprocess
-from pathlib import Path
-
-ROOT = Path(__file__).resolve().parents[2]
-MARKDOWN_LINK_RE = re.compile(r"\[[^\]]+\]\(([^)]+)\)")
-
-
-def _all_docs() -> set[Path]:
-    files = set(ROOT.glob("README*.md"))
-    files.update(ROOT.glob("wiki/**/*.md"))
-    return {p for p in files if p.is_file()}
-
-
-def _changed_docs(base_ref: str) -> set[Path]:
-    cmd = ["git", "diff", "--name-only", f"{base_ref}...HEAD"]
-    output = subprocess.check_output(cmd, cwd=ROOT, text=True)
-    docs: set[Path] = set()
-    for rel in output.splitlines():
-        if not rel.endswith(".md"):
-            continue
-        p = (ROOT / rel).resolve()
-        if p in _all_docs() and p.exists():
-            docs.add(p)
-    return docs
-
-
-def _should_skip(link: str) -> bool:
-    return (
-        not link
-        or link.startswith("#")
-        or "://" in link
-        or link.startswith("mailto:")
-        or link.startswith("tel:")
-    )
-
-
-def _resolve_target(doc: Path, link: str) -> Path:
-    clean = link.split("#", 1)[0].strip()
-    return (doc.parent / clean).resolve()
-
-
-def _select_docs(changed_only: bool, base_ref: str) -> list[Path]:
-    all_docs = _all_docs()
-    if not changed_only:
-        return sorted(all_docs)
-
-    try:
-        changed = _changed_docs(base_ref)
-    except Exception as exc:  # noqa: BLE001
-        print(f"[link-check] WARN: changed-only mode failed ({exc}); falling back to full scan")
-        return sorted(all_docs)
-
-    if not changed:
-        print("[link-check] No changed markdown docs detected; nothing to check.")
-        return []
-
-    return sorted(changed)
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser(description="Check local markdown links in README/wiki docs")
-    parser.add_argument("--changed-only", action="store_true", help="Check only changed markdown docs against a base ref")
-    parser.add_argument("--base-ref", default="origin/main", help="Base ref for --changed-only (default: origin/main)")
-    args = parser.parse_args()
-
-    docs = _select_docs(args.changed_only, args.base_ref)
-    failures: list[str] = []
-
-    for doc in docs:
-        rel_doc = doc.relative_to(ROOT)
-        content = doc.read_text(encoding="utf-8")
-        for match in MARKDOWN_LINK_RE.finditer(content):
-            raw_link = match.group(1).strip()
-            if _should_skip(raw_link):
-                continue
-
-            target = _resolve_target(doc, raw_link)
-            if not target.exists():
-                failures.append(f"{rel_doc}: broken link -> {raw_link}")
-
-    if failures:
-        print(f"[link-check] FAILED: {len(failures)} broken link(s) found.")
-        for item in failures:
-            print(f"  - {item}")
-        return 1
-
-    scope = "changed docs" if args.changed_only else "all docs"
-    print(f"[link-check] PASS: no broken local markdown links found ({scope}).")
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

scripts/i18n/qa_check.py

@@ -1,208 +0,0 @@
-#!/usr/bin/env python3
-"""Translation QA checks for ClawSec docs.
-
-Validates markdown translation pairs with a focus on technical integrity:
-- fenced code blocks are preserved exactly
-- key inline technical tokens are preserved
-- absolute URLs from source are preserved
-- non-translatable product/skill terms are preserved
-
-This script checks only pairs that already exist (partial translation is allowed).
-"""
-
-from __future__ import annotations
-
-import re
-import sys
-from dataclasses import dataclass
-from pathlib import Path
-
-
-@dataclass(frozen=True)
-class Pair:
-    source: Path
-    target: Path
-
-
-NON_TRANSLATABLE_TERMS = (
-    "ClawSec",
-    "OpenClaw",
-    "NanoClaw",
-    "Hermes",
-    "Picoclaw",
-    "clawsec-suite",
-)
-
-
-def _extract_fenced_blocks(text: str) -> list[str]:
-    return re.findall(r"```[^\n]*\n.*?```", text, flags=re.DOTALL)
-
-
-def _extract_inline_code(text: str) -> list[str]:
-    return re.findall(r"`([^`\n]+)`", text)
-
-
-def _extract_absolute_urls(text: str) -> set[str]:
-    return set(re.findall(r"https?://[^\s)>'\"]+", text))
-
-
-def _is_technical_inline_token(token: str) -> bool:
-    checks = (
-        "/" in token,
-        token.startswith("./"),
-        token.startswith("../"),
-        token.endswith(".md"),
-        token.endswith(".yml"),
-        token.endswith(".json"),
-        token.startswith("npx "),
-        token.startswith("npm "),
-        token.startswith("python "),
-        token.startswith("node "),
-        "--" in token,
-        bool(re.search(r"\$[A-Z_][A-Z0-9_]*", token)),
-    )
-    return any(checks)
-
-
-def _collect_pairs(repo_root: Path) -> list[Pair]:
-    pairs: list[Pair] = []
-
-    readme_en = repo_root / "README.md"
-    for translated_readme in sorted(repo_root.glob("README.*.md")):
-        if translated_readme.name == "README.md":
-            continue
-        if readme_en.exists():
-            pairs.append(Pair(readme_en, translated_readme))
-
-    wiki_root = repo_root / "wiki"
-
-    language_dirs = {
-        p.name
-        for p in wiki_root.iterdir()
-        if p.is_dir() and (p / "INDEX.md").exists() and p.name not in {"modules", "i18n", "assets"}
-    }
-
-    for source in wiki_root.rglob("*.md"):
-        rel = source.relative_to(wiki_root)
-        rel_parts = rel.parts
-        if not rel_parts:
-            continue
-
-        # Skip language roots and i18n metadata as source files.
-        if rel_parts[0] in language_dirs or rel_parts[0] == "i18n":
-            continue
-
-        for lang in sorted(language_dirs):
-            target = wiki_root / lang / rel
-            if target.exists():
-                pairs.append(Pair(source, target))
-
-    return sorted(pairs, key=lambda p: str(p.source))
-
-
-def _extract_command_lines_from_fence(block: str) -> list[str]:
-    lines = block.splitlines()[1:-1]
-    cleaned: list[str] = []
-    for line in lines:
-        candidate = line.strip()
-        if not candidate or candidate.startswith("#"):
-            continue
-        cleaned.append(candidate)
-    return cleaned
-
-
-def _check_pair(pair: Pair) -> tuple[list[str], list[str]]:
-    errors: list[str] = []
-    warnings: list[str] = []
-    source_text = pair.source.read_text(encoding="utf-8")
-    target_text = pair.target.read_text(encoding="utf-8")
-
-    source_blocks = _extract_fenced_blocks(source_text)
-    target_blocks = _extract_fenced_blocks(target_text)
-
-    partial_pair = len(source_blocks) != len(target_blocks)
-
-    if partial_pair:
-        # Allow partial translations, but preserve command lines in translated fences.
-        for idx, target_block in enumerate(target_blocks, start=1):
-            for command_line in _extract_command_lines_from_fence(target_block):
-                if command_line not in source_text:
-                    errors.append(
-                        f"translated code fence #{idx} contains command line not found in source: {command_line}"
-                    )
-        warnings.append(
-            f"partial translation detected (code fences source={len(source_blocks)} target={len(target_blocks)})"
-        )
-    else:
-        for idx, (src_block, tgt_block) in enumerate(zip(source_blocks, target_blocks), start=1):
-            src_commands = _extract_command_lines_from_fence(src_block)
-            tgt_commands = _extract_command_lines_from_fence(tgt_block)
-            if src_commands != tgt_commands:
-                errors.append(f"code fence #{idx} command lines differ from source")
-
-    source_inline = {tok for tok in _extract_inline_code(source_text) if _is_technical_inline_token(tok)}
-    missing_inline = sorted(tok for tok in source_inline if tok not in target_text)
-    if missing_inline:
-        preview = ", ".join(missing_inline[:8])
-        extra = "" if len(missing_inline) <= 8 else f" (+{len(missing_inline) - 8} more)"
-        msg = f"missing inline technical tokens: {preview}{extra}"
-        if partial_pair:
-            warnings.append(f"{msg} (partial pair)")
-        else:
-            warnings.append(msg)
-
-    source_urls = _extract_absolute_urls(source_text)
-    missing_urls = sorted(url for url in source_urls if url not in target_text)
-    if missing_urls:
-        preview = ", ".join(missing_urls[:5])
-        extra = "" if len(missing_urls) <= 5 else f" (+{len(missing_urls) - 5} more)"
-        msg = f"missing absolute URLs: {preview}{extra}"
-        if partial_pair:
-            warnings.append(f"{msg} (partial pair)")
-        else:
-            warnings.append(msg)
-
-    for term in NON_TRANSLATABLE_TERMS:
-        if term in source_text and term not in target_text:
-            errors.append(f"non-translatable term missing: {term}")
-
-    return errors, warnings
-
-
-def main() -> int:
-    repo_root = Path(__file__).resolve().parents[2]
-    pairs = _collect_pairs(repo_root)
-
-    if not pairs:
-        print("[i18n-qa] No translation pairs found. Nothing to check.")
-        return 0
-
-    print(f"[i18n-qa] Checking {len(pairs)} translation pairs...")
-
-    total_errors = 0
-    total_warnings = 0
-    for pair in pairs:
-        rel_source = pair.source.relative_to(repo_root)
-        rel_target = pair.target.relative_to(repo_root)
-        errors, warnings = _check_pair(pair)
-        for warn in warnings:
-            total_warnings += 1
-            print(f"WARN {rel_source} -> {rel_target} :: {warn}")
-        if errors:
-            total_errors += len(errors)
-            print(f"\nFAIL {rel_source} -> {rel_target}")
-            for err in errors:
-                print(f"  - {err}")
-        else:
-            print(f"PASS {rel_source} -> {rel_target}")
-
-    if total_errors:
-        print(f"\n[i18n-qa] FAILED with {total_errors} issue(s) and {total_warnings} warning(s).")
-        return 1
-
-    print(f"\n[i18n-qa] All checks passed with {total_warnings} warning(s).")
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

scripts/i18n/test_fill_missing_translations_argos.py

@@ -1,88 +0,0 @@
-from __future__ import annotations
-
-import importlib.util
-import sys
-import tempfile
-import types
-import unittest
-from pathlib import Path
-
-
-def _load_module():
-    translate_stub = types.SimpleNamespace(get_translation_from_codes=lambda *_args: None)
-    sys.modules.setdefault("argostranslate", types.SimpleNamespace(translate=translate_stub))
-
-    module_path = Path(__file__).with_name("fill_missing_translations_argos.py")
-    spec = importlib.util.spec_from_file_location("fill_missing_translations_argos", module_path)
-    if spec is None or spec.loader is None:
-        raise RuntimeError(f"Unable to load {module_path}")
-    module = importlib.util.module_from_spec(spec)
-    spec.loader.exec_module(module)
-    return module
-
-
-class FakeTranslator:
-    def translate(self, line: str) -> str:
-        return (
-            line.replace("Brought to you von", "Bereitgestellt von")
-            .replace("the Platform of AI Security", "die Plattform fuer KI-Sicherheit")
-            .replace("requires WSL or Git Bash", "erfordern WSL oder Git Bash")
-        )
-
-
-class FillMissingTranslationsArgosTests(unittest.TestCase):
-    @classmethod
-    def setUpClass(cls) -> None:
-        cls.module = _load_module()
-
-    def test_restore_tokens_handles_placeholder_variants(self) -> None:
-        mapping = {
-            "__TOK_0__": "`bash`",
-            "__TOK_1__": "[Prompt Security](https://prompt.security)",
-            "ZXQTOKEN2QXZ": "`node`",
-        }
-
-        restored = self.module._restore_tokens(
-            "Use __TOK_0_, _TOK_1__, and ZXQTOKEN2 QXZ before running.",
-            mapping,
-        )
-
-        self.assertEqual(
-            restored,
-            "Use `bash`, [Prompt Security](https://prompt.security), and `node` before running.",
-        )
-
-    def test_process_pair_translates_lines_that_still_contain_english_fragments(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            source = root / "source.md"
-            target = root / "target.md"
-            source.write_text(
-                '<h4>Brought to you by <a href="https://prompt.security">Prompt Security</a>, '
-                "the Platform of AI Security</h4>\n",
-                encoding="utf-8",
-            )
-            target.write_text(
-                '<h4>Brought to you von <a href="https://prompt.security">Prompt Security</a>, '
-                "the Platform of AI Security>/h4>\n",
-                encoding="utf-8",
-            )
-
-            changed = self.module._process_pair(source, target, FakeTranslator())
-
-            self.assertEqual(changed, 1)
-            self.assertIn("Bereitgestellt von", target.read_text(encoding="utf-8"))
-            self.assertIn("die Plattform fuer KI-Sicherheit", target.read_text(encoding="utf-8"))
-
-    def test_only_matching_accepts_repo_relative_wiki_targets(self) -> None:
-        repo = Path("/repo")
-        target = repo / "wiki" / "ja" / "overview.md"
-        matches_only = getattr(self.module, "_matches_only", lambda *_args: False)
-
-        self.assertTrue(matches_only(target, repo, {"wiki/ja/overview.md"}))
-        self.assertTrue(matches_only(target, repo, {"overview.md"}))
-        self.assertFalse(matches_only(target, repo, {"wiki/ja/security.md"}))
-
-
-if __name__ == "__main__":
-    unittest.main()

scripts/i18n/test_qa_check.py

@@ -1,41 +0,0 @@
-from __future__ import annotations
-
-import importlib.util
-import sys
-import tempfile
-import unittest
-from pathlib import Path
-
-
-def _load_module():
-    module_path = Path(__file__).with_name("qa_check.py")
-    spec = importlib.util.spec_from_file_location("qa_check", module_path)
-    if spec is None or spec.loader is None:
-        raise RuntimeError(f"Unable to load {module_path}")
-    module = importlib.util.module_from_spec(spec)
-    sys.modules[spec.name] = module
-    spec.loader.exec_module(module)
-    return module
-
-
-class QaCheckTests(unittest.TestCase):
-    @classmethod
-    def setUpClass(cls) -> None:
-        cls.module = _load_module()
-
-    def test_partial_pairs_still_fail_when_non_translatable_terms_are_missing(self) -> None:
-        with tempfile.TemporaryDirectory() as tmpdir:
-            root = Path(tmpdir)
-            source = root / "source.md"
-            target = root / "target.md"
-            source.write_text("ClawSec keeps this term.\n```sh\nnpm run build\n```\n", encoding="utf-8")
-            target.write_text("Translated text without the product term.\n", encoding="utf-8")
-
-            errors, warnings = self.module._check_pair(self.module.Pair(source, target))
-
-            self.assertIn("non-translatable term missing: ClawSec", errors)
-            self.assertTrue(any("partial translation detected" in warning for warning in warnings))
-
-
-if __name__ == "__main__":
-    unittest.main()

scripts/populate-local-feed.sh

@@ -11,16 +11,13 @@ set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-# shellcheck source=./feed-utils.sh
-source "$SCRIPT_DIR/feed-utils.sh"
 
 # Configuration - same as pipeline
-init_feed_paths "$PROJECT_ROOT"
-NVD_QUERY_SPECS="$(nvd_query_specs)"
-KEYWORDS_PATTERN="$(nvd_keyword_pattern)"
-GITHUB_REF_PATTERN="$(nvd_github_ref_pattern)"
-CPE_PATTERN="$(nvd_cpe_pattern)"
-ENRICH_SCRIPT="$PROJECT_ROOT/scripts/ci/enrich_exploitability.sh"
+FEED_PATH="$PROJECT_ROOT/advisories/feed.json"
+SKILL_FEED_PATH="$PROJECT_ROOT/skills/clawsec-feed/advisories/feed.json"
+PUBLIC_FEED_PATH="$PROJECT_ROOT/public/advisories/feed.json"
+KEYWORDS="OpenClaw clawdbot Moltbot"
+GITHUB_REF_PATTERN="github.com/openclaw/openclaw"
 
 # Parse args
 DAYS_BACK=120
@@ -49,12 +46,6 @@ echo "Days back: $DAYS_BACK"
 echo "Force mode: $FORCE"
 echo ""
 
-# Verify enrichment helper exists (it validates Python/analyzer prerequisites internally).
-if [ ! -x "$ENRICH_SCRIPT" ]; then
-  echo "Error: Exploitability enrichment helper not found or not executable: $ENRICH_SCRIPT"
-  exit 1
-fi
-
 # Create temp directory
 TEMP_DIR=$(mktemp -d)
 trap 'rm -rf "$TEMP_DIR"' EXIT
@@ -71,7 +62,7 @@ fi
 if [ -z "${START_DATE:-}" ]; then
   # macOS vs Linux date compatibility
   if date -v-1d > /dev/null 2>&1; then
-    START_DATE=$(date -u -v-"${DAYS_BACK}"d +%Y-%m-%dT%H:%M:%S.000Z)
+    START_DATE=$(date -u -v-${DAYS_BACK}d +%Y-%m-%dT%H:%M:%S.000Z)
   else
     START_DATE=$(date -u -d "${DAYS_BACK} days ago" +%Y-%m-%dT%H:%M:%S.000Z)
   fi
@@ -83,24 +74,21 @@ echo "End date: $END_DATE"
 echo ""
 
 # URL encode dates
-START_ENC=${START_DATE//:/%3A}
-END_ENC=${END_DATE//:/%3A}
+START_ENC=$(echo "$START_DATE" | sed 's/:/%3A/g')
+END_ENC=$(echo "$END_DATE" | sed 's/:/%3A/g')
 
 echo "=== Fetching CVEs from NVD ==="
 
-while IFS='|' read -r QUERY_KIND QUERY_VALUE; do
-  [ -n "$QUERY_KIND" ] || continue
-
-  QUERY_SLUG=$(nvd_query_slug "$QUERY_KIND" "$QUERY_VALUE")
-  echo "Fetching $QUERY_KIND query: $QUERY_VALUE"
-
-  URL=$(nvd_build_url "$QUERY_KIND" "$QUERY_VALUE" "&lastModStartDate=${START_ENC}&lastModEndDate=${END_ENC}")
-
+for KEYWORD in $KEYWORDS; do
+  echo "Fetching keyword: $KEYWORD"
+  
+  URL="https://services.nvd.nist.gov/rest/json/cves/2.0?keywordSearch=${KEYWORD}&lastModStartDate=${START_ENC}&lastModEndDate=${END_ENC}"
+  
   # Fetch with retry logic
   for i in 1 2 3; do
-    HTTP_CODE=$(curl -s -w "%{http_code}" -o "$TEMP_DIR/nvd_${QUERY_SLUG}.json" "$URL")
+    HTTP_CODE=$(curl -s -w "%{http_code}" -o "$TEMP_DIR/nvd_${KEYWORD}.json" "$URL")
     if [ "$HTTP_CODE" = "200" ]; then
-      COUNT=$(jq '.vulnerabilities | length // 0' "$TEMP_DIR/nvd_${QUERY_SLUG}.json" 2>/dev/null || echo 0)
+      COUNT=$(jq '.vulnerabilities | length // 0' "$TEMP_DIR/nvd_${KEYWORD}.json" 2>/dev/null || echo 0)
       echo "  ✓ Found $COUNT CVEs"
       break
     elif [ "$HTTP_CODE" = "403" ] || [ "$HTTP_CODE" = "429" ]; then
@@ -115,7 +103,7 @@ while IFS='|' read -r QUERY_KIND QUERY_VALUE; do
   # NVD recommends 6 second delay between requests
   echo "  Waiting 6s (NVD rate limit)..."
   sleep 6
-done <<< "$NVD_QUERY_SPECS"
+done
 
 echo ""
 echo "=== Processing CVEs ==="
@@ -123,10 +111,8 @@ echo "=== Processing CVEs ==="
 # Combine all fetched CVEs
 echo '{"vulnerabilities":[]}' > "$TEMP_DIR/combined.json"
 
-while IFS='|' read -r QUERY_KIND QUERY_VALUE; do
-  [ -n "$QUERY_KIND" ] || continue
-  QUERY_SLUG=$(nvd_query_slug "$QUERY_KIND" "$QUERY_VALUE")
-  FILE="$TEMP_DIR/nvd_${QUERY_SLUG}.json"
+for KEYWORD in $KEYWORDS; do
+  FILE="$TEMP_DIR/nvd_${KEYWORD}.json"
   if [ -f "$FILE" ] && [ -s "$FILE" ]; then
     if jq -e '.vulnerabilities' "$FILE" > /dev/null 2>&1; then
       jq -s '.[0].vulnerabilities += .[1].vulnerabilities | .[0]' \
@@ -134,7 +120,7 @@ while IFS='|' read -r QUERY_KIND QUERY_VALUE; do
       mv "$TEMP_DIR/combined_new.json" "$TEMP_DIR/combined.json"
     fi
   fi
-done <<< "$NVD_QUERY_SPECS"
+done
 
 # Deduplicate by CVE ID
 jq '.vulnerabilities | unique_by(.cve.id)' "$TEMP_DIR/combined.json" > "$TEMP_DIR/unique_cves.json"
@@ -142,13 +128,13 @@ TOTAL=$(jq 'length' "$TEMP_DIR/unique_cves.json")
 echo "Total unique CVEs from NVD: $TOTAL"
 
 # Post-filter: keep only CVEs matching our criteria
-jq --arg kw "$KEYWORDS_PATTERN" --arg gh "$GITHUB_REF_PATTERN" --arg cpe "$CPE_PATTERN" '
+KEYWORDS_PATTERN="OpenClaw|clawdbot|Moltbot|openclaw"
+
+jq --arg kw "$KEYWORDS_PATTERN" --arg gh "$GITHUB_REF_PATTERN" '
   [.[] | select(
     (.cve.descriptions[]? | select(.lang == "en") | .value | test($kw; "i"))
     or
     (.cve.references[]? | .url | test($gh; "i"))
-    or
-    ([.cve.configurations[]? | .. | objects | .criteria? | strings | test($cpe; "i")] | any)
   )]
 ' "$TEMP_DIR/unique_cves.json" > "$TEMP_DIR/filtered_cves.json"
 
@@ -158,16 +144,17 @@ echo "Filtered CVEs (matching criteria): $FILTERED"
 # Get existing advisory IDs (unless force mode)
 if [ "$FORCE" = "true" ]; then
   echo "Force mode: ignoring existing advisory IDs during transform"
-  echo '[]' > "$TEMP_DIR/existing_ids.json"
+  EXISTING_IDS=""
 elif [ -f "$FEED_PATH" ]; then
-  jq -r '.advisories[]?.id // empty' "$FEED_PATH" | sort -u | \
-    jq -R -s 'split("\n") | map(select(length > 0))' > "$TEMP_DIR/existing_ids.json"
+  EXISTING_IDS=$(jq -r '.advisories[]?.id // empty' "$FEED_PATH" | sort -u)
 else
-  echo '[]' > "$TEMP_DIR/existing_ids.json"
+  EXISTING_IDS=""
 fi
 
 # Transform CVEs to our advisory format (same logic as pipeline)
-jq --slurpfile existing "$TEMP_DIR/existing_ids.json" '
+EXISTING_JSON=$(echo "$EXISTING_IDS" | jq -R -s 'split("\n") | map(select(length > 0))')
+
+jq --argjson existing "$EXISTING_JSON" '
   def map_severity:
     if . == null then "medium"
     elif . >= 9.0 then "critical"
@@ -249,92 +236,22 @@ jq --slurpfile existing "$TEMP_DIR/existing_ids.json" '
         else (cwe_name_map($id) // ("unknown_cwe_" + $id))
         end
     );
-
-  def cpe_criteria:
-    (
-      [.cve.configurations[]? | .. | objects | .criteria? | strings | select(startswith("cpe:2.3:"))]
-      | unique
-    );
-
-  def inferred_targets:
-    (
-      (
-        [
-          (.cve.descriptions[]? | select(.lang == "en") | .value),
-          (.cve.references[]?.url // empty),
-          (.cve.configurations[]? | .. | objects | .criteria? // empty)
-        ]
-        | map(strings | ascii_downcase)
-        | join(" ")
-      ) as $blob
-      | (
-          (if ($blob | test("github\\.com/openclaw/openclaw|\\bopenclaw\\b|\\bclawdbot\\b|\\bmoltbot\\b")) then ["openclaw@*"] else [] end)
-          + (if ($blob | test("github\\.com/qwibitai/nanoclaw|\\bnanoclaw\\b|whatsapp-bot|\\bbaileys\\b")) then ["nanoclaw@*"] else [] end)
-          + (if ($blob | test("github\\.com/softwarepub/hermes|cpe:2\\.3:a:software-metadata\\.pub:hermes|\\bhermes workflow\\b|software publication with rich metadata")) then ["hermes@*"] else [] end)
-          + (if ($blob | test("github\\.com/[^/]+/picoclaw|\\bpicoclaw\\b|cpe:2\\.3:[aho]:[^:]*:picoclaw(?::|$)")) then ["picoclaw@*"] else [] end)
-        )
-    );
-
-  def matched_targets:
-    (
-      (cpe_criteria + inferred_targets)
-      | unique
-      | .[0:5]
-    );
-
-  def platforms_from_targets($targets):
-    (
-      [
-        (if ($targets | map(strings | ascii_downcase | select(startswith("openclaw@") or test("^cpe:2\\.3:[aho]:openclaw:openclaw(?::|$)"))) | length > 0) then "openclaw" else empty end),
-        (if ($targets | map(strings | ascii_downcase | select(startswith("nanoclaw@") or test("^cpe:2\\.3:[aho]:[^:]*:nanoclaw(?::|$)"))) | length > 0) then "nanoclaw" else empty end),
-        (if ($targets | map(strings | ascii_downcase | select(startswith("hermes@") or test("^cpe:2\\.3:[aho]:software-metadata\\.pub:hermes(?::|$)"))) | length > 0) then "hermes" else empty end),
-        (if ($targets | map(strings | ascii_downcase | select(startswith("picoclaw@") or test("^cpe:2\\.3:[aho]:[^:]*:picoclaw(?::|$)"))) | length > 0) then "picoclaw" else empty end)
-      ]
-    );
-
-  def normalized_affected:
-    (
-      matched_targets
-      | if length == 0 then ["openclaw@*", "nanoclaw@*", "hermes@*", "picoclaw@*"] else . end
-    );
-
-  def normalized_platforms:
-    (
-      inferred_targets as $inferred
-      | platforms_from_targets($inferred) as $from_inferred
-      | if ($from_inferred | length) > 0 then $from_inferred
-        else
-          matched_targets as $targets
-          | platforms_from_targets($targets) as $from_targets
-          | if ($from_targets | length) > 0 then $from_targets else ["openclaw", "nanoclaw", "hermes", "picoclaw"] end
-        end
-    );
-
-  def preferred_description:
-    (
-      (.cve.descriptions[]? | select(.lang == "en") | .value)
-      // .cve.descriptions[0]?.value
-      // "No description provided by NVD."
-    );
   
-  [.[] |
-    select(.cve.id as $id | (($existing[0] // []) | index($id) | not)) |
+  [.[] | 
+    select(.cve.id as $id | $existing | index($id) | not) |
     {
       id: .cve.id,
       severity: (get_cvss_score | map_severity),
       type: nvd_category_name,
       nvd_category_id: nvd_category_raw,
-      title: (preferred_description | .[0:100] + (if length > 100 then "..." else "" end)),
-      description: preferred_description,
-      affected: normalized_affected,
-      platforms: normalized_platforms,
+      title: (.cve.descriptions[] | select(.lang == "en") | .value | .[0:100] + (if length > 100 then "..." else "" end)),
+      description: (.cve.descriptions[] | select(.lang == "en") | .value),
+      affected: [.cve.configurations[]?.nodes[]?.cpeMatch[]?.criteria // empty] | unique | .[0:5],
       action: "Review and update affected components. See NVD for remediation details.",
       published: .cve.published,
       references: [.cve.references[]?.url // empty] | unique | .[0:3],
       cvss_score: get_cvss_score,
-      nvd_url: ("https://nvd.nist.gov/vuln/detail/" + .cve.id),
-      exploitability_score: null,
-      exploitability_rationale: null
+      nvd_url: ("https://nvd.nist.gov/vuln/detail/" + .cve.id)
     }
   ]
 ' "$TEMP_DIR/filtered_cves.json" > "$TEMP_DIR/new_advisories.json"
@@ -342,11 +259,6 @@ jq --slurpfile existing "$TEMP_DIR/existing_ids.json" '
 NEW_COUNT=$(jq 'length' "$TEMP_DIR/new_advisories.json")
 echo "New advisories to add: $NEW_COUNT"
 
-if [ "$FORCE" = "true" ] && [ "$NEW_COUNT" -ne "$FILTERED" ]; then
-  echo "Error: full rebuild transform mismatch (filtered=$FILTERED, transformed=$NEW_COUNT)"
-  exit 1
-fi
-
 if [ "$NEW_COUNT" -eq 0 ]; then
   echo ""
   echo "No new CVEs found. Feed is up to date."
@@ -354,28 +266,6 @@ if [ "$NEW_COUNT" -eq 0 ]; then
   exit 0
 fi
 
-echo ""
-echo "=== Analyzing Exploitability ==="
-
-# Build CVSS vector lookup for enriched analysis inputs.
-jq '
-  [.[] | {
-    id: .cve.id,
-    cvss_vector: (
-      .cve.metrics.cvssMetricV31[0]?.cvssData.vectorString //
-      .cve.metrics.cvssMetricV30[0]?.cvssData.vectorString //
-      .cve.metrics.cvssMetricV2[0]?.vectorString //
-      ""
-    )
-  }] | map({(.id): .cvss_vector}) | add
-' "$TEMP_DIR/filtered_cves.json" > "$TEMP_DIR/cvss_vectors.json"
-
-"$ENRICH_SCRIPT" \
-  --mode batch \
-  --input "$TEMP_DIR/new_advisories.json" \
-  --output "$TEMP_DIR/new_advisories.json" \
-  --cvss-vectors "$TEMP_DIR/cvss_vectors.json"
-
 echo ""
 echo "=== New Advisories ==="
 jq -r '.[] | "  \(.id) [\(.severity)] - \(.title)"' "$TEMP_DIR/new_advisories.json"
@@ -387,11 +277,11 @@ NOW=$(date -u +%Y-%m-%dT%H:%M:%SZ)
 
 # Merge new advisories into existing feed
 if [ -f "$FEED_PATH" ]; then
-  jq --slurpfile new "$TEMP_DIR/new_advisories.json" --arg now "$NOW" '
+  jq --argjson new "$(cat "$TEMP_DIR/new_advisories.json")" --arg now "$NOW" '
     .updated = $now |
     # Merge by advisory ID so force mode can refresh existing CVEs without duplicates
     .advisories = (
-      reduce ((.advisories // []) + ($new[0] // []))[] as $adv
+      reduce (.advisories + $new)[] as $adv
         ({};
           if ($adv.id // "") == "" then
             .
@@ -405,11 +295,11 @@ if [ -f "$FEED_PATH" ]; then
     )
   ' "$FEED_PATH" > "$TEMP_DIR/updated_feed.json"
 else
-  jq -n --slurpfile advisories "$TEMP_DIR/new_advisories.json" --arg now "$NOW" '{
+  jq -n --argjson advisories "$(cat "$TEMP_DIR/new_advisories.json")" --arg now "$NOW" '{
     version: "1.0.0",
     updated: $now,
-    description: "Community-driven security advisory feed for ClawSec. Automatically updated with OpenClaw, NanoClaw, Hermes, and Picoclaw-related CVEs from NVD.",
-    advisories: (($advisories[0] // []) | sort_by(.published) | reverse)
+    description: "Community-driven security advisory feed for ClawSec. Automatically updated with OpenClaw-related CVEs from NVD.",
+    advisories: ($advisories | sort_by(.published) | reverse)
   }' > "$TEMP_DIR/updated_feed.json"
 fi
 
@@ -418,9 +308,16 @@ if jq empty "$TEMP_DIR/updated_feed.json" 2>/dev/null; then
   # Update main feed
   cp "$TEMP_DIR/updated_feed.json" "$FEED_PATH"
   echo "✓ Updated: $FEED_PATH"
-
-  # Sync feed mirrors for local skill/public consumers.
-  sync_feed_to_mirrors "$FEED_PATH" "create"
+  
+  # Update skill feed
+  mkdir -p "$(dirname "$SKILL_FEED_PATH")"
+  cp "$FEED_PATH" "$SKILL_FEED_PATH"
+  echo "✓ Updated: $SKILL_FEED_PATH"
+  
+  # Update public feed for local dev
+  mkdir -p "$(dirname "$PUBLIC_FEED_PATH")"
+  cp "$FEED_PATH" "$PUBLIC_FEED_PATH"
+  echo "✓ Updated: $PUBLIC_FEED_PATH"
   
   echo ""
   TOTAL_ADVISORIES=$(jq '.advisories | length' "$FEED_PATH")

scripts/populate-local-skills.sh

@@ -168,35 +168,15 @@ EOF
   echo "  ✓ Generated: checksums.json"
   
   # Build skill entry for index
-  SKILL_DATA=$(jq -c --arg tag "$TAG" '
-    . as $skill |
-    def object_or_empty($value):
-      if ($value | type) == "object" then $value else {} end;
-    def object_field($name):
-      object_or_empty($skill[$name]?);
-    def platform_meta:
-      ($skill.platform as $platform
-        | if ($platform | type) == "string" then object_or_empty($skill[$platform]?)
-          else {}
-          end);
-    def platform_list:
-      ([]
-        + (if ($skill.platforms | type) == "array" then $skill.platforms else [] end)
-        + (if ($skill.platform | type) == "string" then [$skill.platform] else [] end)
-        + (["openclaw", "hermes", "nanoclaw", "picoclaw"] | map(select((object_field(.) | length) > 0))))
-      | map(select(type == "string") | ascii_downcase)
-      | unique;
-    {
-      id: .name,
-      name: .name,
-      version: .version,
-      description: .description,
-      emoji: (platform_meta.emoji // object_field("openclaw").emoji // object_field("hermes").emoji // object_field("nanoclaw").emoji // object_field("picoclaw").emoji // "📦"),
-      category: (platform_meta.category // object_field("openclaw").category // object_field("hermes").category // object_field("nanoclaw").category // object_field("picoclaw").category // "utility"),
-      platforms: platform_list,
-      tag: $tag
-    }
-  ' "$SKILL_JSON")
+  SKILL_DATA=$(jq -c --arg tag "$TAG" '{
+    id: .name,
+    name: .name,
+    version: .version,
+    description: .description,
+    emoji: .openclaw.emoji,
+    category: .openclaw.category,
+    tag: $tag
+  }' "$SKILL_JSON")
   
   # Append to index
   if [ "$FIRST_SKILL" = "true" ]; then

scripts/populate-local-wiki.sh

@@ -1,31 +0,0 @@
-#!/bin/bash
-# populate-local-wiki.sh
-# Generates wiki-derived public assets for local preview and CI parity.
-#
-# Usage: ./scripts/populate-local-wiki.sh
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-
-WIKI_DIR="$PROJECT_ROOT/wiki"
-PUBLIC_WIKI_DIR="$PROJECT_ROOT/public/wiki"
-
-if [ ! -d "$WIKI_DIR" ]; then
-  echo "Error: wiki directory not found at $WIKI_DIR"
-  exit 1
-fi
-
-echo "=== ClawSec Local Wiki Populator ==="
-echo "Project root: $PROJECT_ROOT"
-
-node "$PROJECT_ROOT/scripts/generate-wiki-llms.mjs"
-
-PAGE_COUNT=0
-if [ -d "$PUBLIC_WIKI_DIR" ]; then
-  PAGE_COUNT=$(find "$PUBLIC_WIKI_DIR" -type f -path '*/llms.txt' ! -path "$PUBLIC_WIKI_DIR/llms.txt" | wc -l | tr -d ' ')
-fi
-
-echo "Wiki llms index: $PUBLIC_WIKI_DIR/llms.txt"
-echo "Wiki llms pages: $PAGE_COUNT files under $PUBLIC_WIKI_DIR/<page>/llms.txt"

scripts/prepare-to-push.sh

@@ -76,13 +76,13 @@ fi
 # ESLint
 echo -e "\n${YELLOW}Running ESLint...${NC}"
 if $FIX_MODE; then
-  if npx eslint . --ext .ts,.tsx,.js,.jsx,.mjs --ignore-pattern '.auto-claude/**' --fix; then
+  if npx eslint . --ext .ts,.tsx,.js,.jsx,.mjs --fix; then
     check_pass "ESLint (with auto-fix)"
   else
     check_fail "ESLint found unfixable issues"
   fi
 else
-  if npx eslint . --ext .ts,.tsx,.js,.jsx,.mjs --ignore-pattern '.auto-claude/**' --max-warnings 0; then
+  if npx eslint . --ext .ts,.tsx,.js,.jsx,.mjs --max-warnings 0; then
     check_pass "ESLint"
   else
     check_fail "ESLint found issues (run with --fix to auto-fix)"
@@ -190,7 +190,7 @@ print_header "Security"
 # Trivy FS Scan
 if command -v trivy &> /dev/null; then
   echo -e "\n${YELLOW}Running Trivy filesystem scan...${NC}"
-  if trivy fs . --severity CRITICAL,HIGH --exit-code 1 --ignore-unfixed --skip-dirs .auto-claude --skip-files clawsec-signing-private.pem; then
+  if trivy fs . --severity CRITICAL,HIGH --exit-code 1 --ignore-unfixed; then
     check_pass "Trivy filesystem scan"
   else
     check_fail "Trivy found CRITICAL/HIGH vulnerabilities"

scripts/test-deploy-pages-checksums.mjs

@@ -1,54 +0,0 @@
-import assert from "node:assert/strict";
-import { readFile } from "node:fs/promises";
-
-const workflowPath = new URL("../.github/workflows/deploy-pages.yml", import.meta.url);
-const workflow = await readFile(workflowPath, "utf8");
-
-function stepIndex(name) {
-  const marker = `- name: ${name}`;
-  const index = workflow.indexOf(marker);
-  assert.notEqual(index, -1, `missing workflow step: ${name}`);
-  return index;
-}
-
-const signFeedIndex = stepIndex("Sign advisory feed and verify");
-const signGhsaIndex = stepIndex("Sign provisional GHSA feed and verify");
-const generateChecksumsIndex = stepIndex("Generate advisory checksums manifest");
-const signChecksumsIndex = stepIndex("Sign checksums and verify");
-
-assert.ok(
-  signFeedIndex < generateChecksumsIndex,
-  "advisory checksums manifest must be generated after feed.json.sig is created",
-);
-assert.ok(
-  signGhsaIndex < generateChecksumsIndex,
-  "advisory checksums manifest must be generated after ghsa-without-cve.json.sig is created",
-);
-assert.ok(
-  generateChecksumsIndex < signChecksumsIndex,
-  "checksums signature must be generated after checksums.json is refreshed",
-);
-
-const generateStepBody = workflow.slice(generateChecksumsIndex, signChecksumsIndex);
-assert.match(
-  generateStepBody,
-  /public\/advisories\/\*\.json\.sig/,
-  "advisory checksums manifest must include detached advisory signatures",
-);
-
-const mirrorBlockIndex = workflow.indexOf(
-  "# Mirror advisories feed + signatures at the path referenced by suite docs/heartbeat",
-);
-assert.notEqual(mirrorBlockIndex, -1, "missing advisory release mirror block");
-
-const mirrorBlock = workflow.slice(mirrorBlockIndex, workflow.indexOf("if [ -f \"public/checksums.json\"", mirrorBlockIndex));
-assert.match(
-  mirrorBlock,
-  /cp "public\/advisories\/ghsa-without-cve\.json" "\$MIRROR_LATEST_DIR\/ghsa-without-cve\.json"/,
-  "GHSA provisional feed must be mirrored at the release-root compatibility path",
-);
-assert.match(
-  mirrorBlock,
-  /cp "public\/advisories\/ghsa-without-cve\.json\.sig" "\$MIRROR_LATEST_DIR\/ghsa-without-cve\.json\.sig"/,
-  "GHSA provisional feed signature must be mirrored at the release-root compatibility path",
-);

scripts/test-ghsa-poll-workflow.mjs

@@ -1,37 +0,0 @@
-import assert from 'node:assert/strict';
-import { readFile } from 'node:fs/promises';
-
-const workflowPath = new URL('../.github/workflows/poll-ghsa-without-cve.yml', import.meta.url);
-const workflow = await readFile(workflowPath, 'utf8');
-
-assert.match(workflow, /workflow_dispatch:/, 'GHSA poll workflow must remain runnable as a manual fallback');
-assert.doesNotMatch(
-  workflow,
-  /\n\s+schedule:/,
-  'Scheduled GHSA consolidation belongs to the NVD workflow to avoid duplicate automated feed PRs',
-);
-assert.match(
-  workflow,
-  /FEED_PATH:\s+advisories\/feed\.json/,
-  'GHSA poll workflow must know the consolidated agent feed path',
-);
-assert.match(
-  workflow,
-  /SKILL_FEED_PATH:\s+skills\/clawsec-feed\/advisories\/feed\.json/,
-  'GHSA poll workflow must sync the consolidated agent feed into clawsec-feed',
-);
-assert.match(
-  workflow,
-  /--consolidated-feed "\$FEED_PATH"/,
-  'GHSA poll workflow must merge GHSA advisories into the agent-facing feed',
-);
-assert.match(
-  workflow,
-  /input_file: \$\{\{ env\.FEED_PATH \}\}/,
-  'GHSA poll workflow must sign the consolidated agent feed when it changes',
-);
-assert.match(
-  workflow,
-  /cp "\$FEED_SIG_PATH" "\$SKILL_FEED_SIG_PATH"/,
-  'GHSA poll workflow must sync consolidated feed signature into clawsec-feed',
-);

scripts/test-ghsa-without-cve-feed.mjs

@@ -1,425 +0,0 @@
-import assert from 'node:assert/strict';
-import test from 'node:test';
-
-import {
-  buildConsolidatedAdvisoryFeed,
-  buildGhsaWithoutCveFeed,
-  fetchGitHubSecurityAdvisories,
-  inferPlatforms,
-  normalizeGhsaAdvisory,
-} from './ghsa-without-cve-feed.mjs';
-
-const fixedNow = '2026-05-24T00:00:00Z';
-
-function advisory(overrides = {}) {
-  return {
-    ghsa_id: 'GHSA-test-1111-2222',
-    cve_id: null,
-    html_url: 'https://github.com/openclaw/openclaw/security/advisories/GHSA-test-1111-2222',
-    summary: 'Workspace bridge allows sandbox escape',
-    description: 'OpenClaw before 2026.4.25 allowed a sandbox escape.',
-    severity: 'high',
-    published_at: '2026-04-24T00:00:00Z',
-    updated_at: '2026-04-25T00:00:00Z',
-    vulnerabilities: [
-      {
-        package: { ecosystem: 'npm', name: 'openclaw' },
-        vulnerable_version_range: '<2026.4.25',
-        patched_versions: '2026.4.25',
-      },
-    ],
-    cvss: {
-      vector_string: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H',
-      score: 7.8,
-    },
-    cwe_ids: ['CWE-94'],
-    credits: [{ login: 'researcher', type: 'reporter' }],
-    ...overrides,
-  };
-}
-
-test('inferPlatforms maps known repositories to feed platforms', () => {
-  assert.deepEqual(inferPlatforms('openclaw/openclaw'), ['openclaw']);
-  assert.deepEqual(inferPlatforms('qwibitai/nanoclaw'), ['nanoclaw']);
-  assert.deepEqual(inferPlatforms('softwarepub/hermes'), ['hermes']);
-  assert.deepEqual(inferPlatforms('sipeed/picoclaw'), ['picoclaw']);
-});
-
-test('fetchGitHubSecurityAdvisories follows cursor pagination links', async (t) => {
-  const originalFetch = globalThis.fetch;
-  const nextUrl =
-    'https://api.github.com/repositories/1103012935/security-advisories?per_page=100&after=cursor';
-  const calls = [];
-
-  globalThis.fetch = async (url) => {
-    calls.push(String(url));
-    if (calls.length === 1) {
-      return new globalThis.Response(
-        JSON.stringify(
-          Array.from({ length: 100 }, (_, index) =>
-            advisory({ ghsa_id: `GHSA-page-1111-${String(index).padStart(4, '0')}` }),
-          ),
-        ),
-        {
-          status: 200,
-          headers: {
-            Link: `<${nextUrl}>; rel="next"`,
-          },
-        },
-      );
-    }
-    if (String(url) !== nextUrl) {
-      throw new Error(`unexpected pagination URL: ${url}`);
-    }
-    return new globalThis.Response(JSON.stringify([advisory({ ghsa_id: 'GHSA-next-1111-2222' })]), {
-      status: 200,
-    });
-  };
-  t.after(() => {
-    globalThis.fetch = originalFetch;
-  });
-
-  const advisories = await fetchGitHubSecurityAdvisories('openclaw/openclaw', {
-    token: 'test-token',
-  });
-
-  assert.equal(calls.length, 2);
-  assert.equal(calls[1], nextUrl);
-  assert.equal(advisories.length, 101);
-  assert.equal(advisories.at(-1).ghsa_id, 'GHSA-next-1111-2222');
-});
-
-test('normalizeGhsaAdvisory marks fresh GHSA-only advisories active', () => {
-  const normalized = normalizeGhsaAdvisory(advisory(), {
-    now: fixedNow,
-    repository: 'openclaw/openclaw',
-    staleAfterDays: 60,
-  });
-
-  assert.equal(normalized.id, 'GHSA-test-1111-2222');
-  assert.equal(normalized.status, 'active');
-  assert.equal(normalized.cve_id, null);
-  assert.equal(normalized.stale, false);
-  assert.deepEqual(normalized.platforms, ['openclaw']);
-  assert.deepEqual(normalized.affected, ['openclaw@<2026.4.25']);
-});
-
-test('normalizeGhsaAdvisory marks old GHSA-only advisories stale after threshold', () => {
-  const normalized = normalizeGhsaAdvisory(
-    advisory({ published_at: '2026-03-01T00:00:00Z' }),
-    {
-      now: fixedNow,
-      repository: 'openclaw/openclaw',
-      staleAfterDays: 60,
-    },
-  );
-
-  assert.equal(normalized.status, 'stale');
-  assert.equal(normalized.stale, true);
-  assert.equal(normalized.cve_id, null);
-});
-
-test('normalizeGhsaAdvisory marks existing GHSA entries matured when a CVE appears', () => {
-  const normalized = normalizeGhsaAdvisory(
-    advisory({ cve_id: 'CVE-2026-9999' }),
-    {
-      now: fixedNow,
-      repository: 'openclaw/openclaw',
-      staleAfterDays: 60,
-    },
-  );
-
-  assert.equal(normalized.status, 'matured');
-  assert.equal(normalized.stale, false);
-  assert.equal(normalized.cve_id, 'CVE-2026-9999');
-  assert.equal(normalized.nvd_url, 'https://nvd.nist.gov/vuln/detail/CVE-2026-9999');
-});
-
-test('buildGhsaWithoutCveFeed only imports CVE-backed advisories that were already tracked', () => {
-  const existing = {
-    version: '0.1.0',
-    advisories: [
-      normalizeGhsaAdvisory(advisory({ ghsa_id: 'GHSA-old-1111-2222' }), {
-        now: '2026-04-25T00:00:00Z',
-        repository: 'openclaw/openclaw',
-        staleAfterDays: 60,
-      }),
-    ],
-  };
-  const fetched = [
-    {
-      repository: 'openclaw/openclaw',
-      advisories: [
-        advisory({ ghsa_id: 'GHSA-new-1111-2222', cve_id: null }),
-        advisory({ ghsa_id: 'GHSA-old-1111-2222', cve_id: 'CVE-2026-1111' }),
-        advisory({ ghsa_id: 'GHSA-cve-only-1111-2222', cve_id: 'CVE-2026-2222' }),
-      ],
-    },
-  ];
-
-  const feed = buildGhsaWithoutCveFeed({
-    fetched,
-    existingFeed: existing,
-    nvdFeed: { advisories: [] },
-    now: fixedNow,
-    staleAfterDays: 60,
-  });
-
-  assert.deepEqual(
-    feed.advisories.map((entry) => [entry.id, entry.status, entry.cve_id]),
-    [
-      ['GHSA-new-1111-2222', 'active', null],
-      ['GHSA-old-1111-2222', 'matured', 'CVE-2026-1111'],
-    ],
-  );
-});
-
-test('buildGhsaWithoutCveFeed matures tracked GHSAs when the CVE feed references them', () => {
-  const existing = {
-    version: '0.1.0',
-    advisories: [
-      normalizeGhsaAdvisory(advisory({ ghsa_id: 'GHSA-oooo-3333-4444' }), {
-        now: '2026-04-25T00:00:00Z',
-        repository: 'openclaw/openclaw',
-        staleAfterDays: 60,
-      }),
-    ],
-  };
-  const feed = buildGhsaWithoutCveFeed({
-    fetched: [
-      {
-        repository: 'openclaw/openclaw',
-        advisories: [advisory({ ghsa_id: 'GHSA-oooo-3333-4444', cve_id: null })],
-      },
-    ],
-    existingFeed: existing,
-    nvdFeed: {
-      advisories: [
-        {
-          id: 'CVE-2026-3333',
-          references: [
-            'https://github.com/openclaw/openclaw/security/advisories/GHSA-oooo-3333-4444',
-          ],
-        },
-      ],
-    },
-    now: fixedNow,
-    staleAfterDays: 60,
-  });
-
-  assert.equal(feed.advisories[0].status, 'matured');
-  assert.equal(feed.advisories[0].cve_id, 'CVE-2026-3333');
-});
-
-test('buildConsolidatedAdvisoryFeed appends active GHSA advisories without moving the NVD poll cursor', () => {
-  const canonicalFeed = {
-    version: '1.0.0',
-    updated: '2026-05-23T00:00:00Z',
-    description: 'Community-driven security advisory feed for ClawSec',
-    advisories: [
-      {
-        id: 'CVE-2026-1111',
-        severity: 'high',
-        type: 'os_command_injection',
-        title: 'Existing CVE',
-        description: 'Existing CVE advisory',
-        affected: ['openclaw@*'],
-        platforms: ['openclaw'],
-        action: 'Review NVD.',
-        published: '2026-05-01T00:00:00Z',
-      },
-    ],
-  };
-  const ghsaFeed = {
-    advisories: [
-      normalizeGhsaAdvisory(advisory({ ghsa_id: 'GHSA-active-1111-2222', cve_id: null }), {
-        now: fixedNow,
-        repository: 'openclaw/openclaw',
-        staleAfterDays: 60,
-      }),
-    ],
-  };
-
-  const consolidated = buildConsolidatedAdvisoryFeed({
-    canonicalFeed,
-    ghsaFeed,
-    now: fixedNow,
-  });
-
-  assert.deepEqual(
-    consolidated.advisories.map((entry) => entry.id),
-    ['CVE-2026-1111', 'GHSA-active-1111-2222'],
-  );
-  assert.equal(consolidated.updated, canonicalFeed.updated);
-  assert.equal(consolidated.advisories[1].source_feed, 'ghsa-without-cve');
-});
-
-test('buildConsolidatedAdvisoryFeed keeps existing GHSA advisories when replacement feed is empty', () => {
-  const canonicalFeed = {
-    version: '1.0.0',
-    updated: '2026-05-23T00:00:00Z',
-    advisories: [
-      {
-        id: 'CVE-2026-1111',
-        published: '2026-05-01T00:00:00Z',
-      },
-      {
-        id: 'GHSA-keep-1111-2222',
-        ghsa_id: 'GHSA-keep-1111-2222',
-        status: 'active',
-        published: '2026-05-02T00:00:00Z',
-        source_feed: 'ghsa-without-cve',
-      },
-    ],
-  };
-
-  const consolidated = buildConsolidatedAdvisoryFeed({
-    canonicalFeed,
-    ghsaFeed: { advisories: [] },
-    now: fixedNow,
-  });
-
-  assert.deepEqual(
-    consolidated.advisories.map((entry) => entry.id),
-    ['GHSA-keep-1111-2222', 'CVE-2026-1111'],
-  );
-});
-
-test('buildConsolidatedAdvisoryFeed replaces only matching GHSA canonical entries', () => {
-  const canonicalFeed = {
-    version: '1.0.0',
-    updated: '2026-05-23T00:00:00Z',
-    advisories: [
-      {
-        id: 'GHSA-repl-1111-2222',
-        ghsa_id: 'GHSA-repl-1111-2222',
-        status: 'active',
-        title: 'Old GHSA payload',
-        published: '2026-05-01T00:00:00Z',
-        source_feed: 'ghsa-without-cve',
-      },
-      {
-        id: 'GHSA-keep-3333-4444',
-        ghsa_id: 'GHSA-keep-3333-4444',
-        status: 'active',
-        title: 'Retained GHSA payload',
-        published: '2026-05-02T00:00:00Z',
-        source_feed: 'ghsa-without-cve',
-      },
-    ],
-  };
-  const ghsaFeed = {
-    advisories: [
-      {
-        id: 'GHSA-repl-1111-2222',
-        ghsa_id: 'GHSA-repl-1111-2222',
-        status: 'stale',
-        title: 'Replacement GHSA payload',
-        published: '2026-05-03T00:00:00Z',
-      },
-    ],
-  };
-
-  const consolidated = buildConsolidatedAdvisoryFeed({
-    canonicalFeed,
-    ghsaFeed,
-    now: fixedNow,
-  });
-
-  assert.deepEqual(
-    consolidated.advisories.map((entry) => [entry.id, entry.title, entry.status]),
-    [
-      ['GHSA-repl-1111-2222', 'Replacement GHSA payload', 'stale'],
-      ['GHSA-keep-3333-4444', 'Retained GHSA payload', 'active'],
-    ],
-  );
-});
-
-test('buildConsolidatedAdvisoryFeed drops GHSA duplicate when matching CVE is present', () => {
-  const canonicalFeed = {
-    version: '1.0.0',
-    updated: '2026-05-23T00:00:00Z',
-    advisories: [
-      {
-        id: 'CVE-2026-2222',
-        severity: 'high',
-        type: 'code_injection',
-        title: 'Canonical CVE',
-        description: 'Canonical CVE advisory',
-        affected: ['openclaw@*'],
-        platforms: ['openclaw'],
-        action: 'Review NVD.',
-        published: '2026-05-02T00:00:00Z',
-      },
-      {
-        id: 'GHSA-old-duplicate',
-        ghsa_id: 'GHSA-old-duplicate',
-        cve_id: 'CVE-2026-2222',
-        status: 'matured',
-        source_feed: 'ghsa-without-cve',
-        severity: 'high',
-        type: 'github_security_advisory',
-        title: 'Old duplicate',
-        description: 'Old provisional duplicate',
-        affected: ['openclaw@*'],
-        platforms: ['openclaw'],
-        action: 'Track CVE.',
-        published: '2026-05-01T00:00:00Z',
-      },
-    ],
-  };
-  const ghsaFeed = {
-    advisories: [
-      normalizeGhsaAdvisory(
-        advisory({ ghsa_id: 'GHSA-new-duplicate', cve_id: 'CVE-2026-2222' }),
-        {
-          now: fixedNow,
-          repository: 'openclaw/openclaw',
-          staleAfterDays: 60,
-        },
-      ),
-    ],
-  };
-
-  const consolidated = buildConsolidatedAdvisoryFeed({
-    canonicalFeed,
-    ghsaFeed,
-    now: fixedNow,
-  });
-
-  assert.deepEqual(
-    consolidated.advisories.map((entry) => entry.id),
-    ['CVE-2026-2222'],
-  );
-});
-
-test('buildConsolidatedAdvisoryFeed keeps matured GHSA until CVE lands in canonical feed', () => {
-  const canonicalFeed = {
-    version: '1.0.0',
-    updated: '2026-05-23T00:00:00Z',
-    advisories: [],
-  };
-  const ghsaFeed = {
-    advisories: [
-      normalizeGhsaAdvisory(
-        advisory({ ghsa_id: 'GHSA-matured-1111-2222', cve_id: 'CVE-2026-4444' }),
-        {
-          now: fixedNow,
-          repository: 'openclaw/openclaw',
-          staleAfterDays: 60,
-        },
-      ),
-    ],
-  };
-
-  const consolidated = buildConsolidatedAdvisoryFeed({
-    canonicalFeed,
-    ghsaFeed,
-    now: fixedNow,
-  });
-
-  assert.deepEqual(
-    consolidated.advisories.map((entry) => [entry.id, entry.status, entry.cve_id]),
-    [['GHSA-matured-1111-2222', 'matured', 'CVE-2026-4444']],
-  );
-});

scripts/test-github-traffic-archive.mjs

@@ -1,241 +0,0 @@
-import assert from 'node:assert/strict';
-import { mkdtemp, readdir, readFile } from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import test from 'node:test';
-
-import {
-  buildTrafficSummary,
-  fetchGitHubTraffic,
-  mergeTrafficArchive,
-  writeJson,
-} from './archive-github-traffic.mjs';
-
-const TEST_REPOSITORY = 'prompt-security/clawsec';
-const TEST_CAPTURE_DATE = Date.UTC(2026, 5, 3);
-
-const utcDay = (offsetFromCaptureDate = 0) => {
-  const date = new Date(TEST_CAPTURE_DATE);
-  date.setUTCDate(date.getUTCDate() + offsetFromCaptureDate);
-  return `${date.toISOString().slice(0, 10)}T00:00:00Z`;
-};
-
-const captureAt = ({
-  offsetFromCaptureDate = 0,
-  hour = 3,
-  minute = 17,
-} = {}) => {
-  const date = new Date(TEST_CAPTURE_DATE);
-  date.setUTCDate(date.getUTCDate() + offsetFromCaptureDate);
-  date.setUTCHours(hour, minute, 0, 0);
-  return date.toISOString();
-};
-
-const capturedAt = captureAt();
-
-test('fetchGitHubTraffic requests the daily GitHub traffic endpoints with auth', async () => {
-  const calls = [];
-  const responses = {
-    [`/repos/${TEST_REPOSITORY}/traffic/views?per=day`]: {
-      count: 30,
-      uniques: 18,
-      views: [{ timestamp: utcDay(-1), count: 30, uniques: 18 }],
-    },
-    [`/repos/${TEST_REPOSITORY}/traffic/clones?per=day`]: {
-      count: 7,
-      uniques: 5,
-      clones: [{ timestamp: utcDay(-1), count: 7, uniques: 5 }],
-    },
-    [`/repos/${TEST_REPOSITORY}/traffic/popular/referrers`]: [
-      { referrer: 'github.com', count: 12, uniques: 9 },
-    ],
-    [`/repos/${TEST_REPOSITORY}/traffic/popular/paths`]: [
-      { path: `/${TEST_REPOSITORY}`, title: TEST_REPOSITORY, count: 16, uniques: 10 },
-    ],
-  };
-
-  const fetchImpl = async (url, options) => {
-    calls.push({ url: String(url), headers: options.headers });
-    const pathname = new URL(url).pathname;
-    const search = new URL(url).search;
-    const payload = responses[`${pathname}${search}`];
-    assert.ok(payload, `unexpected traffic endpoint: ${pathname}${search}`);
-    return new globalThis.Response(JSON.stringify(payload), { status: 200 });
-  };
-
-  const snapshot = await fetchGitHubTraffic({
-    repo: TEST_REPOSITORY,
-    token: 'test-token',
-    capturedAt,
-    fetchImpl,
-  });
-
-  assert.equal(calls.length, 4);
-  assert.ok(calls.every((call) => call.headers.Authorization === 'Bearer test-token'));
-  assert.deepEqual(snapshot.views.views, responses[`/repos/${TEST_REPOSITORY}/traffic/views?per=day`].views);
-  assert.deepEqual(snapshot.clones.clones, responses[`/repos/${TEST_REPOSITORY}/traffic/clones?per=day`].clones);
-});
-
-test('mergeTrafficArchive upserts daily views and clones without double-counting overlapping windows', () => {
-  const archive = mergeTrafficArchive(
-    {
-      version: 1,
-      repository: TEST_REPOSITORY,
-      updated_at: captureAt({ offsetFromCaptureDate: -1 }),
-      daily: {
-        views: [
-          { timestamp: utcDay(-2), count: 10, uniques: 6 },
-          { timestamp: utcDay(-1), count: 20, uniques: 12 },
-        ],
-        clones: [
-          { timestamp: utcDay(-2), count: 2, uniques: 1 },
-        ],
-      },
-      snapshots: {
-        referrers: [],
-        paths: [],
-      },
-      captures: [],
-    },
-    {
-      repository: TEST_REPOSITORY,
-      captured_at: capturedAt,
-      views: {
-        views: [
-          { timestamp: utcDay(-1), count: 25, uniques: 14 },
-          { timestamp: utcDay(), count: 35, uniques: 21 },
-        ],
-      },
-      clones: {
-        clones: [
-          { timestamp: utcDay(-1), count: 3, uniques: 2 },
-          { timestamp: utcDay(), count: 5, uniques: 4 },
-        ],
-      },
-      referrers: [{ referrer: 'github.com', count: 12, uniques: 9 }],
-      paths: [{ path: `/${TEST_REPOSITORY}`, title: TEST_REPOSITORY, count: 16, uniques: 10 }],
-    },
-  );
-
-  assert.deepEqual(archive.daily.views, [
-    { timestamp: utcDay(-2), count: 10, uniques: 6 },
-    { timestamp: utcDay(-1), count: 25, uniques: 14 },
-    { timestamp: utcDay(), count: 35, uniques: 21 },
-  ]);
-  assert.deepEqual(archive.daily.clones, [
-    { timestamp: utcDay(-2), count: 2, uniques: 1 },
-    { timestamp: utcDay(-1), count: 3, uniques: 2 },
-    { timestamp: utcDay(), count: 5, uniques: 4 },
-  ]);
-});
-
-test('mergeTrafficArchive keeps one referrer/path snapshot per capture date', () => {
-  const first = mergeTrafficArchive(undefined, {
-    repository: TEST_REPOSITORY,
-    captured_at: capturedAt,
-    views: { views: [] },
-    clones: { clones: [] },
-    referrers: [{ referrer: 'github.com', count: 12, uniques: 9 }],
-    paths: [{ path: `/${TEST_REPOSITORY}`, title: TEST_REPOSITORY, count: 16, uniques: 10 }],
-  });
-
-  const second = mergeTrafficArchive(first, {
-    repository: TEST_REPOSITORY,
-    captured_at: captureAt({ hour: 4, minute: 0 }),
-    views: { views: [] },
-    clones: { clones: [] },
-    referrers: [{ referrer: 'google.com', count: 8, uniques: 6 }],
-    paths: [{ path: `/${TEST_REPOSITORY}/wiki`, title: 'Wiki', count: 11, uniques: 7 }],
-  });
-
-  assert.equal(second.snapshots.referrers.length, 1);
-  assert.equal(second.snapshots.paths.length, 1);
-  assert.deepEqual(second.snapshots.referrers[0].entries, [
-    { referrer: 'google.com', count: 8, uniques: 6 },
-  ]);
-  assert.deepEqual(second.snapshots.paths[0].entries, [
-    { path: `/${TEST_REPOSITORY}/wiki`, title: 'Wiki', count: 11, uniques: 7 },
-  ]);
-});
-
-test('mergeTrafficArchive rejects blank referrer and path fields instead of archiving empty strings', () => {
-  assert.throws(
-    () => mergeTrafficArchive(undefined, {
-      repository: TEST_REPOSITORY,
-      captured_at: capturedAt,
-      views: { views: [] },
-      clones: { clones: [] },
-      referrers: [{ count: 12, uniques: 9 }],
-      paths: [],
-    }),
-    /referrers\.referrer must be a non-empty string/,
-  );
-
-  assert.throws(
-    () => mergeTrafficArchive(undefined, {
-      repository: TEST_REPOSITORY,
-      captured_at: capturedAt,
-      views: { views: [] },
-      clones: { clones: [] },
-      referrers: [],
-      paths: [{ path: `/${TEST_REPOSITORY}`, title: ' ', count: 16, uniques: 10 }],
-    }),
-    /paths\.title must be a non-empty string/,
-  );
-});
-
-test('writeJson replaces JSON through a same-directory temporary file', async () => {
-  const dir = await mkdtemp(path.join(os.tmpdir(), 'clawsec-traffic-json-'));
-  const file = path.join(dir, 'summary.json');
-
-  await writeJson(file, { version: 1, count: 1 });
-  await writeJson(file, { version: 1, count: 2 });
-
-  assert.equal(await readFile(file, 'utf8'), '{\n  "version": 1,\n  "count": 2\n}\n');
-  assert.deepEqual(await readdir(dir), ['summary.json']);
-});
-
-test('buildTrafficSummary reports count totals and labels summed daily uniques accurately', () => {
-  const archive = mergeTrafficArchive(undefined, {
-    repository: TEST_REPOSITORY,
-    captured_at: capturedAt,
-    views: {
-      views: [
-        { timestamp: utcDay(-33), count: 100, uniques: 80 },
-        { timestamp: utcDay(-1), count: 30, uniques: 18 },
-        { timestamp: utcDay(), count: 40, uniques: 22 },
-      ],
-    },
-    clones: {
-      clones: [
-        { timestamp: utcDay(-1), count: 7, uniques: 5 },
-        { timestamp: utcDay(), count: 9, uniques: 6 },
-      ],
-    },
-    referrers: [],
-    paths: [],
-  });
-
-  const summary = buildTrafficSummary(archive, { now: captureAt({ hour: 12, minute: 0 }) });
-
-  assert.equal(summary.metrics.views.last_30_days.count, 70);
-  assert.equal(summary.metrics.views.last_30_days.sum_daily_uniques, 40);
-  assert.equal(summary.metrics.views.last_30_days.unique_semantics, 'sum_of_daily_uniques');
-  assert.equal(summary.metrics.views.all_time.count, 170);
-  assert.equal(summary.metrics.clones.last_30_days.count, 16);
-  assert.equal(summary.daily.views.length, 3);
-});
-
-test('traffic archive workflow uses a daily schedule and a dedicated archive branch', async () => {
-  const workflowPath = new URL('../.github/workflows/archive-traffic.yml', import.meta.url);
-  const workflow = await readFile(workflowPath, 'utf8');
-
-  assert.match(workflow, /cron:\s+'17 3 \* \* \*'/);
-  assert.match(workflow, /TRAFFIC_ARCHIVE_BRANCH:\s+traffic-archive/);
-  assert.match(workflow, /TRAFFIC_ARCHIVE_TOKEN/);
-  assert.match(workflow, /node scripts\/archive-github-traffic\.mjs/);
-  assert.match(workflow, /git add traffic\/archive\.json traffic\/summary\.json/);
-  assert.match(workflow, /git rm --ignore-unmatch traffic\/README\.md/);
-  assert.doesNotMatch(workflow, /git add .*traffic\/README\.md/);
-  assert.match(workflow, /git push origin HEAD:\$\{TRAFFIC_ARCHIVE_BRANCH\}/);
-});

scripts/test-nvd-ghsa-consolidation-workflow.mjs

@@ -1,88 +0,0 @@
-import assert from 'node:assert/strict';
-import { readFile } from 'node:fs/promises';
-
-const workflowPath = new URL('../.github/workflows/poll-nvd-cves.yml', import.meta.url);
-const workflow = await readFile(workflowPath, 'utf8');
-const ciWorkflowPath = new URL('../.github/workflows/ci.yml', import.meta.url);
-const ciWorkflow = await readFile(ciWorkflowPath, 'utf8');
-
-function requiredIndex(snippet, message) {
-  const index = workflow.indexOf(snippet);
-  assert.notEqual(index, -1, message);
-  return index;
-}
-
-assert.match(
-  workflow,
-  /GHSA_FEED_PATH:\s+advisories\/ghsa-without-cve\.json/,
-  'NVD workflow must write the provisional GHSA source feed',
-);
-assert.match(
-  workflow,
-  /GHSA_FEED_SIG_PATH:\s+advisories\/ghsa-without-cve\.json\.sig/,
-  'NVD workflow must sign the provisional GHSA source feed',
-);
-assert.match(
-  workflow,
-  /node scripts\/ghsa-without-cve-feed\.mjs[\s\S]*--output "\$GHSA_FEED_PATH"[\s\S]*--consolidated-feed "\$FEED_PATH"[\s\S]*--existing-feed "\$GHSA_FEED_PATH"[\s\S]*--nvd-feed "\$FEED_PATH"/,
-  'NVD workflow must merge GHSA advisories into the signed agent feed',
-);
-assert.match(
-  workflow,
-  /id: feed_changes[\s\S]*ghsa_changed=\$GHSA_CHANGED[\s\S]*agent_changed=\$AGENT_CHANGED[\s\S]*changed=true/,
-  'NVD workflow must detect GHSA and consolidated agent feed changes separately',
-);
-assert.match(
-  workflow,
-  /if: steps\.feed_changes\.outputs\.ghsa_changed == 'true'[\s\S]*input_file: \$\{\{ env\.GHSA_FEED_PATH \}\}[\s\S]*signature_file: \$\{\{ env\.GHSA_FEED_SIG_PATH \}\}/,
-  'NVD workflow must sign the provisional GHSA feed when it changes',
-);
-assert.match(
-  workflow,
-  /if: steps\.feed_changes\.outputs\.agent_changed == 'true'[\s\S]*input_file: \$\{\{ env\.FEED_PATH \}\}[\s\S]*signature_file: \$\{\{ env\.FEED_SIG_PATH \}\}/,
-  'NVD workflow must sign the consolidated agent feed when it changes',
-);
-assert.match(
-  workflow,
-  /git add "\$FEED_PATH" "\$FEED_SIG_PATH" "\$GHSA_FEED_PATH" "\$GHSA_FEED_SIG_PATH" "\$SKILL_FEED_PATH" "\$SKILL_FEED_SIG_PATH"/,
-  'NVD workflow PR must include both NVD and GHSA feed artifacts',
-);
-assert.match(
-  ciWorkflow,
-  /name: NVD \+ GHSA Pipeline Dry Run[\s\S]*node scripts\/test-nvd-ghsa-pipeline-dry-run\.mjs/,
-  'CI must run the deterministic NVD + GHSA pipeline dry run before merge',
-);
-
-const updateFeedIndex = requiredIndex('name: Update feed.json', 'NVD workflow must update the CVE feed first');
-const pollGhsaIndex = requiredIndex(
-  'name: Poll GHSA without CVE and consolidate feed',
-  'NVD workflow must poll GHSA before signing',
-);
-const detectChangesIndex = requiredIndex(
-  'name: Detect advisory feed changes',
-  'NVD workflow must detect combined feed changes before signing',
-);
-const signGhsaIndex = requiredIndex(
-  'name: Sign GHSA feed and verify',
-  'NVD workflow must sign the GHSA source feed',
-);
-const signAgentIndex = requiredIndex(
-  'name: Sign advisory feed and verify',
-  'NVD workflow must sign the consolidated agent feed',
-);
-const upsertPrIndex = requiredIndex(
-  'name: Upsert NVD advisory PR',
-  'NVD workflow must upsert a PR for any feed change',
-);
-
-assert.ok(
-  updateFeedIndex < pollGhsaIndex,
-  'GHSA consolidation must run after the NVD update step so matured advisories can reconcile against new CVEs',
-);
-assert.ok(
-  pollGhsaIndex < detectChangesIndex,
-  'Combined feed change detection must run after GHSA consolidation',
-);
-assert.ok(detectChangesIndex < signGhsaIndex, 'GHSA signing must run after change detection');
-assert.ok(detectChangesIndex < signAgentIndex, 'Agent feed signing must run after change detection');
-assert.ok(signAgentIndex < upsertPrIndex, 'The PR must be created after feed signing');

scripts/test-nvd-ghsa-pipeline-dry-run.mjs

@@ -1,187 +0,0 @@
-import assert from 'node:assert/strict';
-import { generateKeyPairSync, sign, verify } from 'node:crypto';
-import { mkdtemp, mkdir, readFile, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-
-import {
-  buildConsolidatedAdvisoryFeed,
-  buildGhsaWithoutCveFeed,
-  normalizeGhsaAdvisory,
-} from './ghsa-without-cve-feed.mjs';
-
-const now = '2026-05-24T00:00:00Z';
-
-function cveAdvisory(overrides = {}) {
-  return {
-    id: 'CVE-2026-1111',
-    severity: 'high',
-    type: 'code_injection',
-    title: 'OpenClaw command execution advisory',
-    description: 'OpenClaw allowed unsafe tool execution in a guarded workspace.',
-    affected: ['openclaw@<2026.5.20'],
-    patched: ['openclaw@2026.5.20'],
-    platforms: ['openclaw'],
-    action: 'Update OpenClaw and verify guarded workspace execution.',
-    published: '2026-05-01T00:00:00Z',
-    updated: '2026-05-01T00:00:00Z',
-    references: ['https://nvd.nist.gov/vuln/detail/CVE-2026-1111'],
-    nvd_url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-1111',
-    ...overrides,
-  };
-}
-
-function ghsaAdvisory(overrides = {}) {
-  return {
-    ghsa_id: 'GHSA-actv-1111-2222',
-    cve_id: null,
-    html_url: 'https://github.com/openclaw/openclaw/security/advisories/GHSA-actv-1111-2222',
-    summary: 'OpenClaw advisory without CVE',
-    description: 'OpenClaw published a public GitHub advisory before CVE assignment.',
-    severity: 'high',
-    published_at: '2026-05-20T00:00:00Z',
-    updated_at: '2026-05-21T00:00:00Z',
-    vulnerabilities: [
-      {
-        package: { ecosystem: 'npm', name: 'openclaw' },
-        vulnerable_version_range: '<2026.5.21',
-        patched_versions: '2026.5.21',
-      },
-    ],
-    cvss: {
-      vector_string: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H',
-      score: 7.8,
-    },
-    cwe_ids: ['CWE-94'],
-    credits: [{ login: 'security-researcher', type: 'reporter' }],
-    ...overrides,
-  };
-}
-
-function signBuffer(data, privateKey) {
-  return sign(null, data, privateKey).toString('base64');
-}
-
-function verifySignature(data, signature, publicKey) {
-  return verify(null, data, publicKey, Buffer.from(signature, 'base64'));
-}
-
-async function writeJson(filePath, value) {
-  await mkdir(path.dirname(filePath), { recursive: true });
-  await writeFile(filePath, `${JSON.stringify(value, null, 2)}\n`);
-}
-
-const tempDir = await mkdtemp(path.join(tmpdir(), 'clawsec-nvd-ghsa-ci-dry-run-'));
-const canonicalFeedPath = path.join(tempDir, 'advisories/feed.json');
-const ghsaFeedPath = path.join(tempDir, 'advisories/ghsa-without-cve.json');
-const skillFeedPath = path.join(tempDir, 'skills/clawsec-feed/advisories/feed.json');
-
-const existingCanonicalFeed = {
-  version: '1.0.0',
-  updated: '2026-05-23T00:00:00Z',
-  description: 'Community-driven security advisory feed for ClawSec',
-  advisories: [
-    cveAdvisory({
-      id: 'CVE-2026-1111',
-      references: [
-        'https://nvd.nist.gov/vuln/detail/CVE-2026-1111',
-        'https://github.com/openclaw/openclaw/security/advisories/GHSA-matd-1111-2222',
-      ],
-    }),
-  ],
-};
-const nvdPollResultFeed = {
-  ...existingCanonicalFeed,
-  updated: now,
-  advisories: [
-    cveAdvisory({
-      id: 'CVE-2026-2222',
-      title: 'Fresh NVD advisory from the poll window',
-      published: '2026-05-24T00:00:00Z',
-      updated: '2026-05-24T00:00:00Z',
-      references: [
-        'https://nvd.nist.gov/vuln/detail/CVE-2026-2222',
-        'https://github.com/openclaw/openclaw/security/advisories/GHSA-cvea-1111-2222',
-      ],
-      nvd_url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-2222',
-    }),
-    ...existingCanonicalFeed.advisories,
-  ],
-};
-const existingGhsaFeed = {
-  version: '0.1.0',
-  updated: '2026-05-20T00:00:00Z',
-  advisories: [
-    normalizeGhsaAdvisory(ghsaAdvisory({ ghsa_id: 'GHSA-matd-1111-2222' }), {
-      now: '2026-05-20T00:00:00Z',
-      repository: 'openclaw/openclaw',
-      staleAfterDays: 60,
-    }),
-  ],
-};
-const fetchedGhsaAdvisories = [
-  {
-    repository: 'openclaw/openclaw',
-    advisories: [
-      ghsaAdvisory({ ghsa_id: 'GHSA-actv-1111-2222' }),
-      ghsaAdvisory({ ghsa_id: 'GHSA-matd-1111-2222' }),
-      ghsaAdvisory({ ghsa_id: 'GHSA-cvea-1111-2222', cve_id: 'CVE-2026-2222' }),
-    ],
-  },
-];
-
-const ghsaFeed = buildGhsaWithoutCveFeed({
-  fetched: fetchedGhsaAdvisories,
-  existingFeed: existingGhsaFeed,
-  nvdFeed: nvdPollResultFeed,
-  now,
-  staleAfterDays: 60,
-});
-assert.deepEqual(
-  ghsaFeed.advisories.map((entry) => [entry.id, entry.status, entry.cve_id]),
-  [
-    ['GHSA-actv-1111-2222', 'active', null],
-    ['GHSA-matd-1111-2222', 'matured', 'CVE-2026-1111'],
-  ],
-  'GHSA dry run should retain active GHSA-only advisories and mature tracked GHSAs',
-);
-
-const consolidatedFeed = buildConsolidatedAdvisoryFeed({
-  canonicalFeed: nvdPollResultFeed,
-  ghsaFeed,
-  now,
-});
-assert.deepEqual(
-  consolidatedFeed.advisories.map((entry) => entry.id),
-  ['CVE-2026-2222', 'GHSA-actv-1111-2222', 'CVE-2026-1111'],
-  'Consolidated feed should include NVD CVEs plus active GHSA-only advisories without duplicate matured GHSAs',
-);
-assert.equal(consolidatedFeed.advisories[1].source_feed, 'ghsa-without-cve');
-assert.equal(consolidatedFeed.updated, nvdPollResultFeed.updated);
-
-await writeJson(canonicalFeedPath, consolidatedFeed);
-await writeJson(ghsaFeedPath, ghsaFeed);
-await writeJson(skillFeedPath, consolidatedFeed);
-
-const { privateKey, publicKey } = generateKeyPairSync('ed25519');
-const canonicalFeedBytes = await readFile(canonicalFeedPath);
-const ghsaFeedBytes = await readFile(ghsaFeedPath);
-const skillFeedBytes = await readFile(skillFeedPath);
-const canonicalSignature = signBuffer(canonicalFeedBytes, privateKey);
-const ghsaSignature = signBuffer(ghsaFeedBytes, privateKey);
-
-await writeFile(`${canonicalFeedPath}.sig`, `${canonicalSignature}\n`);
-await writeFile(`${ghsaFeedPath}.sig`, `${ghsaSignature}\n`);
-await writeFile(`${skillFeedPath}.sig`, `${canonicalSignature}\n`);
-
-assert.deepEqual(skillFeedBytes, canonicalFeedBytes, 'skill advisory feed must match the signed agent feed');
-assert.ok(
-  verifySignature(canonicalFeedBytes, canonicalSignature, publicKey),
-  'canonical consolidated feed signature must verify',
-);
-assert.ok(verifySignature(skillFeedBytes, canonicalSignature, publicKey), 'skill feed signature must verify');
-assert.ok(verifySignature(ghsaFeedBytes, ghsaSignature, publicKey), 'GHSA source feed signature must verify');
-
-console.log(
-  `NVD + GHSA dry run passed: ${consolidatedFeed.advisories.length} consolidated advisories, ${ghsaFeed.advisories.length} GHSA source advisories, signatures verified.`,
-);

scripts/test-skill-release-workflow.mjs

@@ -1,29 +0,0 @@
-import assert from 'node:assert/strict';
-import { readFile } from 'node:fs/promises';
-
-const workflowPath = new URL('../.github/workflows/skill-release.yml', import.meta.url);
-const workflow = await readFile(workflowPath, 'utf8');
-
-assert.match(
-  workflow,
-  /pull_request:[\s\S]*paths:[\s\S]*- 'skills\/\*\*'/,
-  'Skill release workflow must run when any skill package file changes',
-);
-
-assert.match(
-  workflow,
-  /git diff --name-only "\$\{BASE_SHA\}\.\.\.\$\{HEAD_SHA\}" --[\s\S]*'skills\/\*\/\*\*'[\s\S]*':\(exclude\)skills\/\*\/test\/\*\*'[\s\S]*':\(exclude\)skills\/\*\/tests\/\*\*'/,
-  'Skill release validation must ignore test-only skill changes while inspecting release-relevant skill files',
-);
-
-assert.doesNotMatch(
-  workflow,
-  /No version bump detected for \$\{skill_dir\}; skipping\./,
-  'Changed skill directories without a version bump must fail validation instead of being skipped',
-);
-
-assert.match(
-  workflow,
-  /::error file=\$\{skill_dir\}::Changed skill package has no version bump\./,
-  'Skill release validation must emit an explicit missing-version-bump error',
-);

skills/claw-release/CHANGELOG.md

@@ -1,26 +0,0 @@
-# Changelog
-
-## [0.0.3] - 2026-05-14
-
-### Security
-- Added explicit signed release artifact verification instructions for standalone installs, including `checksums.json`, `checksums.sig`, `signing-public.pem`, archive hash verification, and `SKILL.md`/`skill.json` checksum checks.
-
-All notable changes to the Claw Release skill will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [0.0.2] - 2026-04-14
-
-### Added
-
-- Operational notes that make the required maintainer credentials, runtime, and git/GitHub side effects explicit.
-
-### Changed
-
-- Declared `bash` alongside the existing `git`, `jq`, and `gh` runtime requirements in skill metadata.
-- Replaced the documented destructive rollback example with a softer rollback flow that preserves release changes for review.
-
-### Security
-
-- Clarified that this internal skill mutates git state, pushes to remotes, and publishes GitHub Releases, so it should only be run from a trusted checkout by maintainers.

skills/claw-release/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: claw-release
-version: 0.0.3
+version: 0.0.1
 description: Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.
 homepage: https://clawsec.prompt.security
 metadata: {"openclaw":{"emoji":"🚀","category":"utility","internal":true}}
 clawdis:
   emoji: "🚀"
   requires:
-    bins: [bash, git, jq, gh]
+    bins: [git, jq, gh]
 ---
 
 # Claw Release
@@ -18,94 +18,6 @@ Internal tool for releasing skills and managing the ClawSec catalog.
 
 ---
 
-## Operational Notes
-
-- Internal maintainer workflow only.
-- Required runtime: `bash`, `git`, `jq`, `gh`
-- Required credentials: authenticated GitHub CLI with permission to create releases
-- Side effects: creates commits, tags, pushes to remote, and publishes GitHub Releases
-- Trust model: run only from a trusted checkout with a clean working tree and maintainer approval
-
-
-## Release Artifact Verification
-
-For standalone installs, verify the signed release manifest before trusting `SKILL.md`, `skill.json`, or the archive. The `skill.json` file is the package metadata/SBOM source, and the release pipeline signs `checksums.json` with the ClawSec release key.
-
-```bash
-set -euo pipefail
-
-SKILL_NAME="claw-release"
-VERSION="0.0.3"
-REPO="prompt-security/clawsec"
-TAG="${SKILL_NAME}-v${VERSION}"
-BASE="https://github.com/${REPO}/releases/download/${TAG}"
-ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"
-TMP_DIR="$(mktemp -d)"
-trap 'rm -rf "$TMP_DIR"' EXIT
-
-RELEASE_PUBKEY_SHA256="711424e4535f84093fefb024cd1ca4ec87439e53907b305b79a631d5befba9c8"
-
-curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"
-curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"
-curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"
-curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"
-curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"
-curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"
-
-ACTUAL_PUBKEY_SHA256="$(openssl pkey -pubin -in "$TMP_DIR/signing-public.pem" -outform DER | shasum -a 256 | awk '{print $1}')"
-if [ "$ACTUAL_PUBKEY_SHA256" != "$RELEASE_PUBKEY_SHA256" ]; then
-  echo "ERROR: signing-public.pem fingerprint mismatch" >&2
-  exit 1
-fi
-
-openssl base64 -d -A -in "$TMP_DIR/checksums.sig" -out "$TMP_DIR/checksums.sig.bin"
-openssl pkeyutl -verify -rawin -pubin \
-  -inkey "$TMP_DIR/signing-public.pem" \
-  -sigfile "$TMP_DIR/checksums.sig.bin" \
-  -in "$TMP_DIR/checksums.json" >/dev/null
-
-hash_file() {
-  if command -v shasum >/dev/null 2>&1; then
-    shasum -a 256 "$1" | awk '{print $1}'
-  else
-    sha256sum "$1" | awk '{print $1}'
-  fi
-}
-
-verify_manifest_file() {
-  asset="$1"
-  path="$2"
-  expected="$(jq -r --arg asset "$asset" '.files[$asset].sha256 // empty' "$TMP_DIR/checksums.json")"
-  if [ -z "$expected" ]; then
-    echo "ERROR: checksums.json missing $asset" >&2
-    exit 1
-  fi
-  actual="$(hash_file "$path")"
-  if [ "$actual" != "$expected" ]; then
-    echo "ERROR: checksum mismatch for $asset" >&2
-    exit 1
-  fi
-}
-
-expected_archive="$(jq -r '.archive.sha256 // empty' "$TMP_DIR/checksums.json")"
-if [ -z "$expected_archive" ]; then
-  echo "ERROR: checksums.json missing archive.sha256" >&2
-  exit 1
-fi
-actual_archive="$(hash_file "$TMP_DIR/$ZIP_NAME")"
-if [ "$actual_archive" != "$expected_archive" ]; then
-  echo "ERROR: archive checksum mismatch" >&2
-  exit 1
-fi
-
-verify_manifest_file "SKILL.md" "$TMP_DIR/SKILL.md"
-verify_manifest_file "skill.json" "$TMP_DIR/skill.json"
-
-echo "Signed release manifest, archive, SKILL.md, and skill.json verified."
-```
-
-Only install or extract the archive after this verification succeeds.
-
 ## Quick Reference
 
 | Release Type | Command | Tag Format |
@@ -181,12 +93,9 @@ Verify at:
 If you need to undo before pushing:
 
 ```bash
-git tag -d <skill-name>-v<version>
-git reset --soft HEAD~1
+git reset --hard HEAD~1 && git tag -d <skill-name>-v<version>
 ```
 
-`git reset --soft` preserves the release changes in your working tree so you can inspect or amend them without discarding data.
-
 ---
 
 ## Pre-release Versions
@@ -251,6 +160,6 @@ After release, confirm:
 
 ## License
 
-GNU AGPL v3.0 or later - See repository for details.
+MIT License - See repository for details.
 
 Built by the [Prompt Security](https://prompt.security) team.

skills/claw-release/skill.json

@@ -1,16 +1,15 @@
 {
   "name": "claw-release",
-  "version": "0.0.3",
+  "version": "0.0.1",
   "description": "Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.",
   "author": "prompt-security",
-  "license": "AGPL-3.0-or-later",
+  "license": "MIT",
   "homepage": "https://clawsec.prompt.security",
   "keywords": ["release", "versioning", "deployment", "automation", "ci-cd", "skills"],
 
   "sbom": {
     "files": [
-      { "path": "SKILL.md", "required": true, "description": "Release workflow guide" },
-      { "path": "CHANGELOG.md", "required": true, "description": "Version history and release notes" }
+      { "path": "SKILL.md", "required": true, "description": "Release workflow guide" }
     ]
   },
 
@@ -18,25 +17,7 @@
     "emoji": "🚀",
     "category": "utility",
     "internal": true,
-    "requires": { "bins": ["bash", "git", "jq", "gh"] },
-    "runtime": {
-      "required_env": [
-        "GH_TOKEN or existing gh auth"
-      ],
-      "optional_bins": [
-        "git-lfs"
-      ]
-    },
-    "execution": {
-      "always": false,
-      "persistence": "No recurring automation; this is a maintainer-invoked release workflow.",
-      "network_egress": "Pushes git commits/tags and creates GitHub Releases when the maintainer runs the documented release flow."
-    },
-    "operator_review": [
-      "Internal maintainer tool only; it mutates git state, tags, and GitHub release metadata.",
-      "Run it only from a trusted checkout with maintainer credentials and a clean working tree.",
-      "Prefer non-destructive rollback steps; avoid rewriting history unless you explicitly intend to."
-    ],
+    "requires": { "bins": ["git", "jq", "gh"] },
     "triggers": [
       "release skill",
       "create release",

skills/clawsec-clawhub-checker/.clawhubignore

@@ -1 +0,0 @@
-test/

skills/clawsec-clawhub-checker/CHANGELOG.md

@@ -1,51 +0,0 @@
-# Changelog
-
-## [0.0.5] - 2026-06-07
-
-### Security
-- Treat explicit malicious ClawHub and VirusTotal verdicts as blocking signals regardless of the numeric reputation score.
-
-## [0.0.4] - 2026-05-13
-
-### Security
-- Added explicit signed release artifact verification instructions for standalone installs, including `checksums.json`, `checksums.sig`, `signing-public.pem`, archive hash verification, and `SKILL.md`/`skill.json` checksum checks.
-
-### Changed
-- Re-release skill payload metadata after excluding test-only files from release SBOMs and archives.
-
-All notable changes to the ClawSec ClawHub Checker will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [0.0.3] - 2026-04-16
-
-### Changed
-
-- Converted setup flow to non-mutating preflight validation; the skill no longer rewrites or copies files into installed `clawsec-suite` directories.
-- Updated reputation collection to rely on `clawhub inspect --json` security metadata instead of probing `clawhub install` output.
-- Updated documentation and metadata to describe standalone wrapper usage for guarded install checks.
-- Added explicit documentation for optional manual advisory-hook wiring when operators want `reputationWarning` fields in advisory alert rendering.
-
-### Security
-
-- Removed in-place cross-skill source mutation behavior from setup.
-- Removed install-output scraping behavior used only to infer VirusTotal status.
-- Reputation scoring now fails closed when scanner metadata is missing, and hook-level reputation subprocess execution failures are treated as unsafe results.
-
-## [0.0.2] - 2026-04-14
-
-### Added
-
-- Runtime and operator-review metadata describing the suite dependency, ClawHub lookups, and in-place integration behavior.
-- Preflight disclosure in `scripts/setup_reputation_hook.mjs` before the installed suite is modified.
-- Regression coverage for setup disclosure in `test/setup_reputation_hook.test.mjs`.
-
-### Changed
-
-- Declared `node` and `openclaw` as required runtimes alongside `clawhub` because the integration flow depends on all three.
-- Documented that setup rewrites installed `clawsec-suite` files rather than operating on a detached copy.
-
-### Security
-
-- Made the string-based `handler.ts` rewrite and the remote ClawHub reputation-query behavior explicit so operators can review the mutation and network trust model before enabling it.

skills/clawsec-clawhub-checker/README.md

@@ -1,79 +1,133 @@
 # ClawSec ClawHub Checker
 
-A `clawsec-suite` companion skill that adds a standalone reputation gate before guarded installs.
-
-## Operational Notes
-
-- Required runtime: `node`, `clawhub`, `openclaw`
-- Dependency: installed `clawsec-suite`
-- No in-place mutation of other skills
-- Advisory-hook wiring is optional and manual in this release
-- Reputation checks query ClawHub metadata and remain confirmation-gated
+A ClawSec suite skill that enhances the guarded skill installer with ClawHub reputation checks and VirusTotal Code Insight integration.
 
 ## Purpose
 
-Adds a second risk signal before install by:
+Adds a second layer of security to skill installation by:
+1. Checking ClawHub's VirusTotal Code Insight reputation scores
+2. Analyzing skill age, author reputation, and download statistics
+3. Requiring double confirmation for suspicious skills
+4. Integrating with existing ClawSec advisory checks
 
-1. Reading ClawHub inspect/security metadata
-2. Applying reputation heuristics (age, updates, author activity, downloads)
-3. Requiring `--confirm-reputation` for low-score installs
+## Architecture
+
+```
+clawsec-suite (base)
+└── clawsec-clawhub-checker (enhancement)
+    ├── enhanced_guarded_install.mjs - Main enhanced installer
+    ├── check_clawhub_reputation.mjs - Reputation checking logic
+    ├── setup_reputation_hook.mjs - Integration script
+    └── hooks/ - Enhanced advisory guardian hook
+```
 
 ## Installation
 
 ```bash
+# First install the base suite
 npx clawhub install clawsec-suite
+
+# Then install the checker
 npx clawhub install clawsec-clawhub-checker
+
+# Run setup to integrate with existing suite
+node scripts/setup_reputation_hook.mjs
+
+# Restart OpenClaw gateway
+openclaw gateway restart
 ```
 
-Optional preflight helper:
+Setup installs these scripts into `clawsec-suite/scripts`:
+- `enhanced_guarded_install.mjs`
+- `guarded_skill_install_wrapper.mjs` (drop-in wrapper)
+- `check_clawhub_reputation.mjs`
 
-```bash
-node ~/.openclaw/skills/clawsec-clawhub-checker/scripts/setup_reputation_hook.mjs
-```
+The original `guarded_skill_install.mjs` remains unchanged.
 
 ## Usage
 
-```bash
-node ~/.openclaw/skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs \
-  --skill some-skill \
-  --version 1.0.0
-```
-
-Override only after manual review:
+### Enhanced Guarded Installer
 
 ```bash
-node ~/.openclaw/skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs \
-  --skill some-skill \
-  --version 1.0.0 \
-  --confirm-reputation
+# Basic usage via wrapper (includes reputation checks)
+node scripts/guarded_skill_install_wrapper.mjs --skill some-skill --version 1.0.0
+
+# Direct usage (enhanced script)
+node scripts/enhanced_guarded_install.mjs --skill some-skill --version 1.0.0
+
+# With reputation confirmation override
+node scripts/guarded_skill_install_wrapper.mjs --skill suspicious-skill --version 1.0.0 --confirm-reputation
+
+# Adjust reputation threshold (default: 70)
+node scripts/guarded_skill_install_wrapper.mjs --skill some-skill --reputation-threshold 80
 ```
 
-## Optional Advisory-Hook Wiring
+### Reputation Check Only
 
-If you need advisory alerts to include `reputationWarning` / `reputationWarnings`, wire the checker module manually into the installed suite hook:
-
-- Source: `~/.openclaw/skills/clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjs`
-- Target: `~/.openclaw/skills/clawsec-suite/hooks/clawsec-advisory-guardian/handler.ts`
-
-The setup helper validates paths only and does not patch these files automatically.
+```bash
+# Check reputation without installation
+node scripts/check_clawhub_reputation.mjs some-skill 1.0.0 70
+```
 
 ## Exit Codes
 
-- `0` safe to install
-- `42` advisory confirmation required
-- `43` reputation confirmation required
-- `1` error
+- `0` - Safe to install
+- `42` - Advisory match found (requires `--confirm-advisory`)
+- `43` - Reputation warning (requires `--confirm-reputation`) - **NEW**
+- `1` - Error
+
+## Reputation Signals Checked
+
+1. **VirusTotal Code Insight** - Malicious code patterns
+2. **Skill Age** - New skills (<7 days) are riskier
+3. **Author Reputation** - Number of published skills
+4. **Update Frequency** - Stale skills (>90 days)
+5. **Download Statistics** - Low download counts
+6. **Version Existence** - Specified version availability
 
 ## Configuration
 
-- `CLAWHUB_REPUTATION_THRESHOLD` (default: 70)
+Environment variables:
+- `CLAWHUB_REPUTATION_THRESHOLD` - Minimum score (0-100, default: 70)
+
+## Integration Points
+
+1. **Enhanced `guarded_skill_install.mjs`** - Wraps original with reputation checks
+   via `guarded_skill_install_wrapper.mjs` and `enhanced_guarded_install.mjs`
+2. **Updated advisory guardian hook** - Adds reputation warnings to alerts
+3. **Catalog entry in clawsec-suite** - Listed as available enhancement
+
+## Development
+
+### Files
+
+- `SKILL.md` - Main documentation
+- `skill.json` - Skill metadata and SBOM
+- `scripts/enhanced_guarded_install.mjs` - Enhanced installer
+- `scripts/check_clawhub_reputation.mjs` - Reputation logic
+- `scripts/setup_reputation_hook.mjs` - Integration script
+- `hooks/clawsec-advisory-guardian/lib/reputation.mjs` - Hook module
+
+### Testing
+
+```bash
+# Test reputation check
+node scripts/check_clawhub_reputation.mjs clawsec-suite
+
+# Test enhanced installer (dry run)
+node scripts/enhanced_guarded_install.mjs --skill test-skill --dry-run
+
+# Test setup
+node scripts/setup_reputation_hook.mjs
+```
 
 ## Security Considerations
 
-- Reputation is heuristic, not authoritative
-- False positives are possible
-- Always inspect code before confirming installation
+- Reputation checks are **heuristic**, not definitive
+- **False positives** possible with legitimate novel skills
+- Always **review skill code** before overriding warnings
+- This is **defense-in-depth**, not replacement for advisory feeds
 
 ## License
 
-GNU AGPL v3.0 or later - Part of the ClawSec security suite
+MIT - Part of the ClawSec security suite

skills/clawsec-clawhub-checker/SKILL.md

@@ -1,187 +1,149 @@
 ---
 name: clawsec-clawhub-checker
-version: 0.0.5
-description: ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.
+version: 0.0.1
+description: ClawHub reputation checker for ClawSec suite. Enhances guarded skill installer with VirusTotal Code Insight reputation scores and additional safety checks.
 homepage: https://clawsec.prompt.security
 clawdis:
   emoji: "🛡️"
   requires:
-    bins: [node, clawhub, openclaw]
+    bins: [clawhub, curl, jq]
   depends_on: [clawsec-suite]
 ---
 
 # ClawSec ClawHub Checker
 
-Adds a reputation gate on top of the `clawsec-suite` guarded installer.
-
-## Operational Notes
-
-- Required runtime: `node`, `clawhub`, `openclaw`
-- Depends on: installed `clawsec-suite`
-- Side effects: none on other skills; this package does not rewrite installed suite files
-- Advisory-hook wiring is optional and manual in this release
-- Network behavior: reputation checks call ClawHub inspect/search endpoints
-- Trust model: scores are heuristic and confirmation-gated
+Enhances the ClawSec suite's guarded skill installer with ClawHub reputation checks. Adds a second layer of security by checking VirusTotal Code Insight scores and other reputation signals before allowing skill installation.
 
 ## What It Does
 
-1. Reads skill metadata from ClawHub (`inspect --json`)
-2. Evaluates scanner status (including VirusTotal summary when present)
-3. Applies additional reputation heuristics (age, updates, author history, downloads)
-4. Requires explicit `--confirm-reputation` when score is below threshold
+1. **Wraps `clawhub install`** - Intercepts skill installation requests
+2. **Checks VirusTotal reputation** - Uses ClawHub's built-in VirusTotal Code Insight
+3. **Adds double confirmation** - For suspicious skills (reputation score below threshold)
+4. **Integrates with advisory feed** - Works alongside existing clawsec-suite advisories
+5. **Provides detailed reports** - Shows why a skill is flagged as suspicious
 
 ## Installation
 
-Install after `clawsec-suite`:
+This skill must be installed **after** `clawsec-suite`:
 
 ```bash
+# First install the suite
 npx clawhub@latest install clawsec-suite
+
+# Then install the checker
 npx clawhub@latest install clawsec-clawhub-checker
-```
 
-Optional preflight check (validates local paths and prints recommended command):
-
-```bash
+# Run the setup script to integrate with clawsec-suite
 node ~/.openclaw/skills/clawsec-clawhub-checker/scripts/setup_reputation_hook.mjs
+
+# Restart OpenClaw gateway for changes to take effect
+openclaw gateway restart
 ```
 
+After setup, the checker adds `enhanced_guarded_install.mjs` and
+`guarded_skill_install_wrapper.mjs` under `clawsec-suite/scripts` and updates the advisory
+guardian hook. The original `guarded_skill_install.mjs` is not replaced.
 
-## Release Artifact Verification
+## How It Works
 
-For standalone installs, verify the signed release manifest before trusting `SKILL.md`, `skill.json`, or the archive. The `skill.json` file is the package metadata/SBOM source, and the release pipeline signs `checksums.json` with the ClawSec release key.
+### Enhanced Guarded Installer
 
+After setup, run the wrapper (drop-in path) or the enhanced script directly:
 ```bash
-set -euo pipefail
+# Recommended drop-in wrapper
+node scripts/guarded_skill_install_wrapper.mjs --skill some-skill --version 1.0.0
 
-SKILL_NAME="clawsec-clawhub-checker"
-VERSION="0.0.4"
-REPO="prompt-security/clawsec"
-TAG="${SKILL_NAME}-v${VERSION}"
-BASE="https://github.com/${REPO}/releases/download/${TAG}"
-ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"
-TMP_DIR="$(mktemp -d)"
-trap 'rm -rf "$TMP_DIR"' EXIT
-
-RELEASE_PUBKEY_SHA256="711424e4535f84093fefb024cd1ca4ec87439e53907b305b79a631d5befba9c8"
-
-curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"
-curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"
-curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"
-curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"
-curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"
-curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"
-
-ACTUAL_PUBKEY_SHA256="$(openssl pkey -pubin -in "$TMP_DIR/signing-public.pem" -outform DER | shasum -a 256 | awk '{print $1}')"
-if [ "$ACTUAL_PUBKEY_SHA256" != "$RELEASE_PUBKEY_SHA256" ]; then
-  echo "ERROR: signing-public.pem fingerprint mismatch" >&2
-  exit 1
-fi
-
-openssl base64 -d -A -in "$TMP_DIR/checksums.sig" -out "$TMP_DIR/checksums.sig.bin"
-openssl pkeyutl -verify -rawin -pubin \
-  -inkey "$TMP_DIR/signing-public.pem" \
-  -sigfile "$TMP_DIR/checksums.sig.bin" \
-  -in "$TMP_DIR/checksums.json" >/dev/null
-
-hash_file() {
-  if command -v shasum >/dev/null 2>&1; then
-    shasum -a 256 "$1" | awk '{print $1}'
-  else
-    sha256sum "$1" | awk '{print $1}'
-  fi
-}
-
-verify_manifest_file() {
-  asset="$1"
-  path="$2"
-  expected="$(jq -r --arg asset "$asset" '.files[$asset].sha256 // empty' "$TMP_DIR/checksums.json")"
-  if [ -z "$expected" ]; then
-    echo "ERROR: checksums.json missing $asset" >&2
-    exit 1
-  fi
-  actual="$(hash_file "$path")"
-  if [ "$actual" != "$expected" ]; then
-    echo "ERROR: checksum mismatch for $asset" >&2
-    exit 1
-  fi
-}
-
-expected_archive="$(jq -r '.archive.sha256 // empty' "$TMP_DIR/checksums.json")"
-if [ -z "$expected_archive" ]; then
-  echo "ERROR: checksums.json missing archive.sha256" >&2
-  exit 1
-fi
-actual_archive="$(hash_file "$TMP_DIR/$ZIP_NAME")"
-if [ "$actual_archive" != "$expected_archive" ]; then
-  echo "ERROR: archive checksum mismatch" >&2
-  exit 1
-fi
-
-verify_manifest_file "SKILL.md" "$TMP_DIR/SKILL.md"
-verify_manifest_file "skill.json" "$TMP_DIR/skill.json"
-
-echo "Signed release manifest, archive, SKILL.md, and skill.json verified."
+# Or call the enhanced script directly
+node scripts/enhanced_guarded_install.mjs --skill some-skill --version 1.0.0
 ```
 
-Only install or extract the archive after this verification succeeds.
+The enhanced flow:
+1. **Advisory check** (existing) - Checks clawsec advisory feed
+2. **Reputation check** (new) - Queries ClawHub for VirusTotal scores
+3. **Risk assessment** - Combines advisory + reputation signals
+4. **Double confirmation** - If risky, requires explicit `--confirm-reputation`
 
-## Usage
+### Reputation Signals Checked
 
-Run the enhanced installer directly from this skill:
+1. **VirusTotal Code Insight** - Malicious code patterns, external dependencies (Docker usage, network calls, eval usage, crypto keys)
+2. **Skill age & updates** - New skills vs established ones
+3. **Author reputation** - Other skills by same author
+4. **Download statistics** - Popularity signals
 
-```bash
-node ~/.openclaw/skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs \
-  --skill some-skill \
-  --version 1.0.0
-```
+### Exit Codes
 
-If a skill is below threshold, rerun only with explicit approval:
-
-```bash
-node ~/.openclaw/skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs \
-  --skill some-skill \
-  --version 1.0.0 \
-  --confirm-reputation
-```
-
-## Optional Advisory-Hook Wiring (Manual)
-
-This release does not auto-patch `clawsec-suite` hook files.  
-If you rely on advisory alerts that include `reputationWarning` / `reputationWarnings`, wire the checker module manually:
-
-- Source module: `~/.openclaw/skills/clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjs`
-- Target hook file: `~/.openclaw/skills/clawsec-suite/hooks/clawsec-advisory-guardian/handler.ts`
-
-Treat that wiring as a deliberate local customization and review it before enabling.
-
-## Exit Codes
-
-- `0` safe to install
-- `42` advisory confirmation required (from clawsec-suite)
-- `43` reputation confirmation required
-- `1` error
+- `0` - Safe to install (no advisories, good reputation)
+- `42` - Advisory match found (existing behavior)
+- `43` - Reputation warning (new - requires `--confirm-reputation`)
+- `1` - Error
 
 ## Configuration
 
 Environment variables:
+- `CLAWHUB_REPUTATION_THRESHOLD` - Minimum reputation score (0-100, default: 70)
 
-- `CLAWHUB_REPUTATION_THRESHOLD` - Minimum score (0-100, default: 70)
+## Integration with Existing Suite
+
+The checker enhances but doesn't replace existing security:
+- **Advisory feed still primary** - Known malicious skills blocked first
+- **Reputation is secondary** - Unknown/suspicious skills get extra scrutiny
+- **Double confirmation preserved** - Both layers require explicit user approval
+
+## Example Usage
+
+```bash
+# Try to install a skill
+node scripts/guarded_skill_install_wrapper.mjs --skill suspicious-skill --version 1.0.0
+
+# Output might show:
+# WARNING: Skill "suspicious-skill" has low reputation score (45/100)
+# - Flagged by VirusTotal Code Insight: crypto keys, external APIs, eval usage
+# - Author has no other published skills
+# - Skill is less than 7 days old
+# 
+# To install despite reputation warning, run:
+# node scripts/guarded_skill_install_wrapper.mjs --skill suspicious-skill --version 1.0.0 --confirm-reputation
+
+# Install with confirmation
+node scripts/guarded_skill_install_wrapper.mjs --skill suspicious-skill --version 1.0.0 --confirm-reputation
+```
 
 ## Safety Notes
 
-- This is defense-in-depth, not a replacement for advisory matching
-- Scanner outputs can produce false positives and false negatives
-- Always review skill code before overriding warnings
+- This is a **defense-in-depth** layer, not a replacement for advisory feeds
+- VirusTotal scores are **heuristic**, not definitive
+- **False positives possible** - Legitimate skills with novel patterns might be flagged
+- Always **review skill code** before installing with `--confirm-reputation`
+
+## Current Limitations
+
+### Missing OpenClaw Internal Check Data
+ClawHub shows two security badges on skill pages:
+1. **VirusTotal Code Insight** - ✅ Our checker catches these flags
+2. **OpenClaw internal check** - ❌ Not exposed via API (only on website)
+
+Example from `clawsec-suite` page:
+- VirusTotal: "Benign" ✓
+- OpenClaw internal check: "The package is internally consistent with a feed-monitoring / advisory-guardian purpose, but a few operational details and optional bypasses deserve attention before installing."
+
+**Our checker cannot access OpenClaw internal check warnings** as they're not exposed via `clawhub` CLI or API.
+
+### Recommendation for ClawHub
+To enable complete reputation checking, ClawHub should expose internal check results via:
+- `clawhub inspect --json` endpoint
+- Additional API field for security tools
+- Or include in `clawhub install` warning output
+
+### Workaround
+Our heuristic checks (skill age, author reputation, downloads, updates) provide similar risk assessment but miss specific operational warnings about bypasses, missing signatures, etc. Always check the ClawHub website for complete security assessment.
 
 ## Development
 
-Key files:
-
-- `scripts/enhanced_guarded_install.mjs`
-- `scripts/check_clawhub_reputation.mjs`
-- `scripts/setup_reputation_hook.mjs`
-- `hooks/clawsec-advisory-guardian/lib/reputation.mjs`
+To modify the reputation checking logic, edit:
+- `scripts/enhanced_guarded_install.mjs` - Main enhanced installer
+- `scripts/check_clawhub_reputation.mjs` - Reputation checking logic
+- `hooks/clawsec-advisory-guardian/lib/reputation.mjs` - Hook integration
 
 ## License
 
-GNU AGPL v3.0 or later - Part of the ClawSec security suite
+MIT - Part of the ClawSec security suite

skills/clawsec-clawhub-checker/hooks/clawsec-advisory-guardian/lib/reputation.mjs

@@ -1,4 +1,4 @@
-import { spawnSync as runProcessSync } from "node:child_process";
+import { spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import path from "node:path";
 
@@ -26,7 +26,7 @@ export async function checkReputation(skillName, version) {
     const __dirname = path.dirname(fileURLToPath(import.meta.url));
     const checkerDir = path.resolve(__dirname, '../../..');
     
-    const reputationCheck = runProcessSync(
+    const reputationCheck = spawnSync(
       "node",
       [
         `${checkerDir}/scripts/check_clawhub_reputation.mjs`,
@@ -37,20 +37,6 @@ export async function checkReputation(skillName, version) {
       { encoding: "utf-8", cwd: checkerDir }
     );
 
-    if (reputationCheck.error) {
-      result.safe = false;
-      result.score = 0;
-      result.warnings.push(`Reputation check execution error: ${reputationCheck.error.message}`);
-      return result;
-    }
-
-    if (typeof reputationCheck.status !== "number") {
-      result.safe = false;
-      result.score = 0;
-      result.warnings.push("Reputation check did not return a process exit status");
-      return result;
-    }
-
     if (reputationCheck.status === 0) {
       try {
         const repResult = JSON.parse(reputationCheck.stdout);
@@ -75,16 +61,10 @@ export async function checkReputation(skillName, version) {
         result.warnings.push("Skill flagged by reputation check");
       }
     } else {
-      const stderr = (reputationCheck.stderr || "").trim();
-      const stdout = (reputationCheck.stdout || "").trim();
-      const output = [stderr, stdout].filter((entry) => entry).join(" | ");
-      result.warnings.push(
-        `Reputation check failed with exit code ${reputationCheck.status}${
-          output ? `: ${output}` : ""
-        }`,
-      );
-      result.score = 0;
-      result.safe = false;
+      // Error running check
+      result.warnings.push(`Reputation check failed: ${reputationCheck.stderr || 'Unknown error'}`);
+      result.score = 60;
+      result.safe = result.score >= 70;
     }
   } catch (error) {
     result.warnings.push(`Reputation check error: ${error.message}`);

skills/clawsec-clawhub-checker/scripts/check_clawhub_reputation.mjs

@@ -1,123 +1,9 @@
 #!/usr/bin/env node
 
-import { spawnSync as runProcessSync } from "node:child_process";
+import { spawnSync } from "node:child_process";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 
-function runClawhub(args) {
-  return runProcessSync("clawhub", args, { encoding: "utf-8" });
-}
-
-function toPublicResult(result) {
-  return {
-    safe: result.safe,
-    score: result.score,
-    warnings: result.warnings,
-    virustotal: result.virustotal,
-  };
-}
-
-function finalizeResult(result, threshold) {
-  result.score = Math.max(0, Math.min(100, result.score));
-  result.safe = !result.blocked && result.score >= threshold;
-  if (!result.safe) {
-    const thresholdWarning = `Reputation score ${result.score}/100 below threshold ${threshold}/100`;
-    if (!result.warnings.includes(thresholdWarning)) {
-      result.warnings.unshift(thresholdWarning);
-    }
-  }
-  return toPublicResult(result);
-}
-
-function blockOnMissingScannerData(result, warning) {
-  result.warnings.push(warning);
-  result.score = Math.min(result.score, 60);
-  result.blocked = true;
-}
-
-function blockOnMaliciousScannerData(result, warning) {
-  result.warnings.push(warning);
-  result.score = 0;
-  result.blocked = true;
-}
-
-function parseJson(raw, label, warnings) {
-  try {
-    return JSON.parse(raw);
-  } catch (error) {
-    warnings.push(
-      `Failed to parse ${label}: ${error instanceof Error ? error.message : String(error)}`,
-    );
-    return null;
-  }
-}
-
-function maybeApplyVersionSecuritySignals(result, versionDetails) {
-  if (!versionDetails || typeof versionDetails !== "object") {
-    blockOnMissingScannerData(result, "ClawHub version security details are unavailable");
-    return;
-  }
-
-  const security = versionDetails.security;
-  if (!security || typeof security !== "object") {
-    blockOnMissingScannerData(result, "ClawHub version record does not include security scanner output");
-    return;
-  }
-
-  const securityStatus = typeof security.status === "string" ? security.status.toLowerCase() : "";
-  if (securityStatus === "malicious") {
-    blockOnMaliciousScannerData(result, "ClawHub static moderation marked the version as malicious");
-  } else if (securityStatus === "suspicious") {
-    result.warnings.push("ClawHub static moderation marked the version as suspicious");
-    result.score -= 30;
-  }
-
-  const scanners = security.scanners;
-  if (!scanners || typeof scanners !== "object") {
-    blockOnMissingScannerData(result, "ClawHub scanner breakdown is missing from version metadata");
-    return;
-  }
-
-  const vt = scanners.vt;
-  if (!vt || typeof vt !== "object") {
-    blockOnMissingScannerData(result, "VirusTotal scanner data was not returned by ClawHub");
-    return;
-  }
-
-  const vtStatus =
-    (typeof vt.normalizedStatus === "string" && vt.normalizedStatus) ||
-    (typeof vt.status === "string" && vt.status) ||
-    (typeof vt.verdict === "string" && vt.verdict) ||
-    "";
-  const normalizedStatus = vtStatus.toLowerCase();
-
-  if (normalizedStatus === "malicious") {
-    result.virustotal.push("ClawHub VirusTotal scan returned malicious");
-    blockOnMaliciousScannerData(result, "ClawHub VirusTotal scan returned malicious");
-
-    const vtSummary = typeof vt.analysis === "string" ? vt.analysis.trim() : "";
-    if (vtSummary) {
-      result.virustotal.push(vtSummary.split("\n")[0]);
-    }
-  } else if (normalizedStatus === "suspicious") {
-    result.virustotal.push("ClawHub VirusTotal scan returned suspicious");
-    result.score -= 40;
-
-    const vtSummary = typeof vt.analysis === "string" ? vt.analysis.trim() : "";
-    if (vtSummary) {
-      result.virustotal.push(vtSummary.split("\n")[0]);
-    }
-  } else if (normalizedStatus === "clean" || normalizedStatus === "benign") {
-    result.virustotal.push("ClawHub VirusTotal scan returned clean");
-  } else if (normalizedStatus) {
-    result.warnings.push(`VirusTotal scanner status reported as: ${normalizedStatus}`);
-    result.score -= 10;
-  } else {
-    result.warnings.push("VirusTotal scanner status was unavailable");
-    result.score -= 10;
-  }
-}
-
 /**
  * Check ClawHub reputation for a skill
  * @param {string} skillSlug - Skill slug to check
@@ -128,133 +14,176 @@ function maybeApplyVersionSecuritySignals(result, versionDetails) {
 export async function checkClawhubReputation(skillSlug, version, threshold = 70) {
   const result = {
     safe: true,
-    score: 100,
+    score: 100, // Default score if no checks fail
     warnings: [],
     virustotal: [],
-    blocked: false,
   };
 
+  // Input validation — reject anything that isn't a safe slug or semver
   if (!/^[a-z0-9][a-z0-9-]*$/.test(skillSlug)) {
     result.warnings.push(`Invalid skill slug: ${skillSlug}`);
     result.score = 0;
     result.safe = false;
-    result.blocked = true;
-    return toPublicResult(result);
+    return result;
   }
-
+  // Semver validation: supports major.minor.patch with optional pre-release and build metadata
+  // Examples: 1.0.0, 1.0.0-alpha.1, 1.0.0-beta+20130313144700
+  // More restrictive than full semver spec for security (prevents command injection)
   if (version && !/^\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?(?:\+[a-zA-Z0-9.-]+)?$/.test(version)) {
     result.warnings.push(`Invalid version format: ${version}`);
     result.score = 0;
     result.safe = false;
-    result.blocked = true;
-    return toPublicResult(result);
+    return result;
   }
 
   try {
-    const inspectArgs = ["inspect", skillSlug, "--json"];
-    if (version) inspectArgs.push("--version", version);
-    const inspectResult = runClawhub(inspectArgs);
+    // Check 1: Try to inspect the skill via clawhub
+    const inspectResult = spawnSync(
+      "clawhub",
+      ["inspect", skillSlug, "--json"],
+      { encoding: "utf-8" }
+    );
 
     if (inspectResult.status !== 0) {
+      // Skill doesn't exist or can't be inspected
       result.warnings.push(`Skill "${skillSlug}" not found or cannot be inspected`);
-      result.score = Math.min(result.score, 40);
-      result.blocked = true;
-      return finalizeResult(result, threshold);
-    }
-
-    const skillInfo = parseJson(inspectResult.stdout, "skill inspection payload", result.warnings);
-    if (!skillInfo) {
-      result.score = Math.min(result.score, 40);
-      result.blocked = true;
-      return finalizeResult(result, threshold);
-    }
-
-    if (skillInfo.skill?.createdAt) {
-      const createdMs = skillInfo.skill.createdAt;
-      const ageDays = (Date.now() - createdMs) / (1000 * 60 * 60 * 24);
-
-      if (ageDays < 7) {
-        result.warnings.push(`Skill is less than 7 days old (${ageDays.toFixed(1)} days)`);
-        result.score -= 15;
-      } else if (ageDays < 30) {
-        result.warnings.push(`Skill is less than 30 days old (${ageDays.toFixed(1)} days)`);
-        result.score -= 5;
-      }
-    }
-
-    if (skillInfo.skill?.updatedAt && skillInfo.skill?.createdAt) {
-      const updatedMs = skillInfo.skill.updatedAt;
-      const createdMs = skillInfo.skill.createdAt;
-      const updateAgeDays = (Date.now() - updatedMs) / (1000 * 60 * 60 * 24);
-      const totalAgeDays = (Date.now() - createdMs) / (1000 * 60 * 60 * 24);
-
-      if (updateAgeDays > 90 && totalAgeDays > 90) {
-        result.warnings.push(`Skill hasn't been updated in ${updateAgeDays.toFixed(0)} days`);
-        result.score -= 10;
-      }
-    }
-
-    if (skillInfo.owner?.handle) {
-      const authorResult = runClawhub(["search", skillInfo.owner.handle]);
-      if (authorResult.status === 0) {
-        const lines = authorResult.stdout
-          .trim()
-          .split("\n")
-          .filter((line) => line);
-        const skillCount = Math.max(0, lines.length - 1);
-
-        if (skillCount === 1) {
-          result.warnings.push(`Author "${skillInfo.owner.handle}" has only 1 published skill`);
-          result.score -= 10;
-        } else if (skillCount > 1 && skillCount < 3) {
-          result.warnings.push(
-            `Author "${skillInfo.owner.handle}" has only ${skillCount} published skills`,
+      result.score = Math.min(result.score, 50);
+    } else {
+      try {
+        const skillInfo = JSON.parse(inspectResult.stdout);
+        
+        // Check 2: Skill age (new skills are riskier)
+        if (skillInfo.skill?.createdAt) {
+          const createdMs = skillInfo.skill.createdAt;
+          const ageDays = (Date.now() - createdMs) / (1000 * 60 * 60 * 24);
+          
+          if (ageDays < 7) {
+            result.warnings.push(`Skill is less than 7 days old (${ageDays.toFixed(1)} days)`);
+            result.score -= 15;
+          } else if (ageDays < 30) {
+            result.warnings.push(`Skill is less than 30 days old (${ageDays.toFixed(1)} days)`);
+            result.score -= 5;
+          }
+        }
+        
+        // Check 3: Update frequency (stale skills are riskier)
+        if (skillInfo.skill?.updatedAt && skillInfo.skill?.createdAt) {
+          const updatedMs = skillInfo.skill.updatedAt;
+          const createdMs = skillInfo.skill.createdAt;
+          const updateAgeDays = (Date.now() - updatedMs) / (1000 * 60 * 60 * 24);
+          const totalAgeDays = (Date.now() - createdMs) / (1000 * 60 * 60 * 24);
+          
+          if (updateAgeDays > 90 && totalAgeDays > 90) {
+            result.warnings.push(`Skill hasn't been updated in ${updateAgeDays.toFixed(0)} days`);
+            result.score -= 10;
+          }
+        }
+        
+        // Check 4: Author reputation
+        if (skillInfo.owner?.handle) {
+          const authorResult = spawnSync(
+            "clawhub",
+            ["search", skillInfo.owner.handle],
+            { encoding: "utf-8" }
           );
-          result.score -= 5;
+          
+          if (authorResult.status === 0) {
+            const lines = authorResult.stdout.trim().split('\n').filter(l => l);
+            const skillCount = lines.length - 1; // First line is header
+            
+            if (skillCount === 1) {
+              result.warnings.push(`Author "${skillInfo.owner.handle}" has only 1 published skill`);
+              result.score -= 10;
+            } else if (skillCount < 3) {
+              result.warnings.push(`Author "${skillInfo.owner.handle}" has only ${skillCount} published skills`);
+              result.score -= 5;
+            }
+          }
+        }
+        
+        // Check 5: Download statistics
+        if (skillInfo.skill?.stats?.downloads !== undefined) {
+          const downloads = skillInfo.skill.stats.downloads;
+          if (downloads < 10) {
+            result.warnings.push(`Low download count: ${downloads}`);
+            result.score -= 10;
+          } else if (downloads < 100) {
+            result.warnings.push(`Moderate download count: ${downloads}`);
+            result.score -= 5;
+          }
+        }
+        
+      } catch (parseError) {
+        result.warnings.push(`Failed to parse skill information: ${parseError.message}`);
+        result.score = Math.min(result.score, 60);
+      }
+    }
+
+    // Check 6: Try installation to detect VirusTotal Code Insight warnings
+    // Note: This approach has potential side effects:
+    // - May download/cache skill metadata before declining
+    // - Depends on clawhub's prompting behavior (sending "n\n" to decline)
+    // - If clawhub inspect provided security flags, we'd use that instead
+    // This is the only way to programmatically access VirusTotal warnings currently
+    const installArgs = ["install", skillSlug];
+    if (version) installArgs.push("--version", version);
+    const installCheck = spawnSync("clawhub", installArgs, {
+      input: "n\n", // Automatically decline the installation prompt
+      encoding: "utf-8",
+    });
+
+    const output = (installCheck.stdout || "") + (installCheck.stderr || "");
+    if (output.includes("suspicious") || output.includes("VirusTotal") || output.includes("flagged")) {
+      result.virustotal.push("Flagged by ClawHub's VirusTotal Code Insight");
+      result.score -= 40; // More severe penalty for VirusTotal flag
+      
+      // Extract specific warnings
+      const lines = output.split('\n');
+      for (const line of lines) {
+        if (line.includes("Warning:") || line.includes("risky patterns") || 
+            line.includes("crypto keys") || line.includes("external APIs") || 
+            line.includes("eval") || line.includes("VirusTotal Code Insight")) {
+          const cleanLine = line.trim().replace(/^⚠️\s*/, '').replace(/^\s*Warning:\s*/, '');
+          if (cleanLine && !result.virustotal.includes(cleanLine)) {
+            result.virustotal.push(cleanLine);
+          }
         }
       }
     }
 
-    if (skillInfo.skill?.stats?.downloads !== undefined) {
-      const downloads = skillInfo.skill.stats.downloads;
-      if (downloads < 10) {
-        result.warnings.push(`Low download count: ${downloads}`);
-        result.score -= 10;
-      } else if (downloads < 100) {
-        result.warnings.push(`Moderate download count: ${downloads}`);
-        result.score -= 5;
+    // Check 7: If version specified, check if it exists
+    if (version) {
+      const versionCheck = spawnSync(
+        "clawhub",
+        ["inspect", skillSlug, "--version", version, "--json"],
+        { encoding: "utf-8" }
+      );
+      
+      if (versionCheck.status !== 0) {
+        result.warnings.push(`Version ${version} not found for skill ${skillSlug}`);
+        result.score -= 20;
       }
     }
 
-    let versionDetails = skillInfo.version ?? null;
-    if (!versionDetails && !version && skillInfo.latestVersion?.version) {
-      const latestVersionCheck = runClawhub([
-        "inspect",
-        skillSlug,
-        "--version",
-        String(skillInfo.latestVersion.version),
-        "--json",
-      ]);
-      if (latestVersionCheck.status === 0) {
-        const latestInfo = parseJson(
-          latestVersionCheck.stdout,
-          "latest-version inspection payload",
-          result.warnings,
-        );
-        versionDetails = latestInfo?.version ?? null;
-      }
+    // Ensure score is within bounds
+    result.score = Math.max(0, Math.min(100, result.score));
+    result.safe = result.score >= threshold;
+
+    // Add summary warning if below threshold
+    if (!result.safe) {
+      result.warnings.unshift(`Reputation score ${result.score}/100 below threshold ${threshold}/100`);
     }
 
-    maybeApplyVersionSecuritySignals(result, versionDetails);
-    return finalizeResult(result, threshold);
   } catch (error) {
-    result.warnings.push(`Reputation check error: ${error instanceof Error ? error.message : String(error)}`);
+    result.warnings.push(`Reputation check error: ${error.message}`);
     result.score = 50;
-    result.blocked = true;
-    return finalizeResult(result, threshold);
+    result.safe = result.score >= threshold;
   }
+
+  return result;
 }
 
+// CLI interface for direct usage
 const isCliEntrypoint =
   process.argv[1] !== undefined &&
   import.meta.url === pathToFileURL(path.resolve(process.argv[1])).href;
@@ -266,33 +195,29 @@ if (isCliEntrypoint) {
       console.error("Usage: node check_clawhub_reputation.mjs <skill-slug> [version] [threshold]");
       process.exit(1);
     }
-
+    
     const skillSlug = args[0];
     const version = args[1] || "";
     let threshold = 70;
-
     if (args[2] !== undefined) {
       const parsedThreshold = parseInt(args[2], 10);
       if (!Number.isInteger(parsedThreshold) || parsedThreshold < 0 || parsedThreshold > 100) {
         console.error(
-          `Invalid threshold: "${args[2]}". Threshold must be an integer between 0 and 100.`,
+          `Invalid threshold: "${args[2]}". Threshold must be an integer between 0 and 100.`
         );
         process.exit(1);
       }
       threshold = parsedThreshold;
     }
-
+    
     const result = await checkClawhubReputation(skillSlug, version, threshold);
-
+    
     console.log(JSON.stringify(result, null, 2));
-
+    
     if (!result.safe) {
       process.exit(43);
     }
   }
-
-  main().catch((error) => {
-    console.error(error);
-    process.exit(1);
-  });
+  
+  main().catch(console.error);
 }

skills/clawsec-clawhub-checker/scripts/enhanced_guarded_install.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { spawnSync as runProcessSync } from "node:child_process";
+import { spawnSync } from "node:child_process";
 import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
@@ -146,7 +146,7 @@ async function runOriginalGuardedInstall(args) {
 
   // Pass through environment without modification
   // The original guarded_skill_install.mjs handles --confirm-advisory properly
-  const child = runProcessSync(
+  const child = spawnSync(
     "node",
     [originalScript, ...args.originalArgs],
     {

skills/clawsec-clawhub-checker/scripts/setup_reputation_hook.mjs

@@ -1,60 +1,158 @@
 #!/usr/bin/env node
 
 import fs from "node:fs/promises";
-import os from "node:os";
 import path from "node:path";
-
-function printUsage() {
-  console.log([
-    "Usage:",
-    "  node scripts/setup_reputation_hook.mjs",
-    "",
-    "This helper no longer mutates installed clawsec-suite files.",
-    "It validates local prerequisites and prints the standalone checker command.",
-    "",
-  ].join("\n"));
-}
-
-function printSummary({ suiteDir, checkerDir, enhancedInstaller }) {
-  const lines = [
-    "Preflight review:",
-    "- This setup does not rewrite files in other skills.",
-    `- It validates expected install paths: ${suiteDir} and ${checkerDir}.`,
-    "- Required runtime for reputation checks: node + clawhub.",
-    "- Advisory-hook reputation annotations are manual only in this release.",
-    "- If you want hook alert annotations, wire checker lib/reputation.mjs into suite handler.ts yourself.",
-    "- Reputation scoring is heuristic and must remain confirmation-gated.",
-    "",
-    "Recommended command:",
-    `  node ${enhancedInstaller} --skill <slug> [--version <semver>]`,
-    "",
-    "Optional shell alias (manual, not applied automatically):",
-    `  alias clawsec-guarded-install='node ${enhancedInstaller}'`,
-  ];
-
-  console.log(lines.join("\n"));
-}
+import os from "node:os";
 
 async function main() {
-  if (process.argv.includes("--help") || process.argv.includes("-h")) {
-    printUsage();
-    return;
-  }
-
+  console.log("Setting up ClawHub reputation checker integration...");
+  
+  // Paths
   const suiteDir = path.join(os.homedir(), ".openclaw", "skills", "clawsec-suite");
   const checkerDir = path.join(os.homedir(), ".openclaw", "skills", "clawsec-clawhub-checker");
-  const enhancedInstaller = path.join(checkerDir, "scripts", "enhanced_guarded_install.mjs");
-  const suiteGuardedInstaller = path.join(suiteDir, "scripts", "guarded_skill_install.mjs");
+  const hookLibDir = path.join(suiteDir, "hooks", "clawsec-advisory-guardian", "lib");
+  const suiteScriptsDir = path.join(suiteDir, "scripts");
+  
+  try {
+    // Check if clawsec-suite is installed
+    await fs.access(suiteDir);
+    console.log(`✓ Found clawsec-suite at ${suiteDir}`);
+    
+    // Check if hook lib directory exists
+    await fs.access(hookLibDir);
+    console.log(`✓ Found advisory guardian hook at ${hookLibDir}`);
+    
+    // Copy reputation module to hook lib
+    const reputationModuleSrc = path.join(checkerDir, "hooks", "clawsec-advisory-guardian", "lib", "reputation.mjs");
+    const reputationModuleDst = path.join(hookLibDir, "reputation.mjs");
+    
+    await fs.copyFile(reputationModuleSrc, reputationModuleDst);
+    console.log(`✓ Copied reputation module to ${reputationModuleDst}`);
+    
+    // Update hook handler to import reputation module
+    const hookHandlerPath = path.join(suiteDir, "hooks", "clawsec-advisory-guardian", "handler.ts");
+    let handlerContent = await fs.readFile(hookHandlerPath, "utf8");
 
-  await fs.access(checkerDir);
-  await fs.access(enhancedInstaller);
-  await fs.access(suiteDir);
-  await fs.access(suiteGuardedInstaller);
+    // WARNING: This setup script uses string manipulation to modify handler.ts
+    // This is fragile and may break if the handler structure changes
+    // Consider using AST-based transformation or manual integration for production use
+    let handlerChanged = false;
+    const importLine = "import { checkReputation } from \"./lib/reputation.mjs\";";
+    const reputationMarker = "// ClawHub reputation check for matched skills";
 
-  printSummary({ suiteDir, checkerDir, enhancedInstaller });
+    if (!handlerContent.includes(importLine)) {
+      // Add import after other imports
+      const importIndex = handlerContent.lastIndexOf("import");
+      if (importIndex === -1) {
+        throw new Error("Could not find import statements in handler.ts. Manual integration required.");
+      }
+
+      const lineEndIndex = handlerContent.indexOf("\n", importIndex);
+      handlerContent = handlerContent.slice(0, lineEndIndex + 1) + `${importLine}\n` + handlerContent.slice(lineEndIndex + 1);
+      handlerChanged = true;
+    } else {
+      console.log("✓ Hook handler already imports reputation module");
+    }
+
+    if (!handlerContent.includes(reputationMarker)) {
+      const findMatchesAnchors = [
+        { line: "const allMatches = findMatches(feed, installedSkills);", variable: "allMatches" },
+        { line: "const matches = findMatches(feed, installedSkills);", variable: "matches" },
+      ];
+      const matchedAnchor = findMatchesAnchors.find((entry) => handlerContent.includes(entry.line));
+
+      if (!matchedAnchor) {
+        throw new Error(
+          "Could not find findMatches assignment in handler.ts. Refusing partial setup. Manual integration required."
+        );
+      }
+
+      const anchorIndex = handlerContent.indexOf(matchedAnchor.line);
+      const insertIndex = handlerContent.indexOf("\n", anchorIndex) + 1;
+      const reputationCheckCode = `
+  ${reputationMarker}
+  for (const match of ${matchedAnchor.variable}) {
+    const repResult = await checkReputation(match.skill.name, match.skill.version);
+    if (!repResult.safe) {
+      match.reputationWarning = true;
+      match.reputationScore = repResult.score;
+      match.reputationWarnings = repResult.warnings;
+    }
+  }
+`;
+      handlerContent = handlerContent.slice(0, insertIndex) + reputationCheckCode + handlerContent.slice(insertIndex);
+      handlerChanged = true;
+    } else {
+      console.log("✓ Hook handler already has reputation scan block");
+    }
+
+    if (handlerChanged) {
+      await fs.writeFile(hookHandlerPath, handlerContent);
+      console.log("✓ Updated hook handler with reputation checks");
+    } else {
+      console.log("✓ Hook handler already has required reputation integration");
+    }
+    
+    // Copy enhanced installer and reputation checker scripts
+    const enhancedInstallerSrc = path.join(checkerDir, "scripts", "enhanced_guarded_install.mjs");
+    const enhancedInstallerDst = path.join(suiteDir, "scripts", "enhanced_guarded_install.mjs");
+    const reputationCheckSrc = path.join(checkerDir, "scripts", "check_clawhub_reputation.mjs");
+    const reputationCheckDst = path.join(suiteScriptsDir, "check_clawhub_reputation.mjs");
+    
+    await fs.copyFile(enhancedInstallerSrc, enhancedInstallerDst);
+    console.log(`✓ Installed enhanced guarded installer at ${enhancedInstallerDst}`);
+
+    await fs.copyFile(reputationCheckSrc, reputationCheckDst);
+    console.log(`✓ Installed reputation check script at ${reputationCheckDst}`);
+    
+    // Create wrapper script that uses enhanced installer by default
+    const wrapperScript = `#!/usr/bin/env node
+
+// Wrapper that uses enhanced guarded installer with reputation checks
+// This replaces the original guarded_skill_install.mjs in usage
+
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import path from "node:path";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const enhancedScript = path.join(__dirname, "enhanced_guarded_install.mjs");
+
+const result = spawnSync("node", [enhancedScript, ...process.argv.slice(2)], {
+  stdio: "inherit",
+});
+
+process.exit(result.status ?? 1);
+`;
+    
+    const wrapperPath = path.join(suiteDir, "scripts", "guarded_skill_install_wrapper.mjs");
+    await fs.writeFile(wrapperPath, wrapperScript);
+    await fs.chmod(wrapperPath, 0o755);
+    console.log(`✓ Created wrapper script at ${wrapperPath}`);
+    
+    console.log("\n" + "=".repeat(80));
+    console.log("SETUP COMPLETE");
+    console.log("=".repeat(80));
+    console.log("\nThe ClawHub reputation checker has been integrated with clawsec-suite.");
+    console.log("\nWhat changed:");
+    console.log("1. Enhanced guarded installer with reputation checks installed");
+    console.log("2. Reputation check helper script installed");
+    console.log("3. Advisory guardian hook updated to include reputation warnings");
+    console.log("4. Wrapper script created for backward compatibility");
+    console.log("\nUsage:");
+    console.log("  node scripts/enhanced_guarded_install.mjs --skill <name> [--version <ver>]");
+    console.log("  node scripts/guarded_skill_install_wrapper.mjs --skill <name> [--version <ver>]");
+    console.log("\nNew exit code: 43 = Reputation warning (requires --confirm-reputation)");
+    console.log("\nRestart OpenClaw gateway for hook changes to take effect.");
+    console.log("=".repeat(80));
+    
+  } catch (error) {
+    console.error("Setup failed:", error.message);
+    console.error("\nMake sure:");
+    console.error("1. clawsec-suite is installed (npx clawhub install clawsec-suite)");
+    console.error("2. You have write permissions to the suite directory");
+    process.exit(1);
+  }
 }
 
-main().catch((error) => {
-  console.error(`Setup failed: ${error instanceof Error ? error.message : String(error)}`);
-  process.exit(1);
-});
+main().catch(console.error);

skills/clawsec-clawhub-checker/skill.json

@@ -1,9 +1,9 @@
 {
   "name": "clawsec-clawhub-checker",
-  "version": "0.0.5",
-  "description": "ClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.",
+  "version": "0.0.1",
+  "description": "ClawHub reputation checker for ClawSec suite. Enhances guarded skill installer with VirusTotal Code Insight reputation scores and additional safety checks.",
   "author": "abutbul",
-  "license": "AGPL-3.0-or-later",
+  "license": "MIT",
   "homepage": "https://clawsec.prompt.security/",
   "keywords": [
     "security",
@@ -36,12 +36,12 @@
       {
         "path": "scripts/setup_reputation_hook.mjs",
         "required": true,
-        "description": "Non-mutating preflight helper that validates paths and prints recommended commands"
+        "description": "Setup script to enhance existing advisory guardian hook"
       },
       {
         "path": "hooks/clawsec-advisory-guardian/lib/reputation.mjs",
-        "required": false,
-        "description": "Optional reputation module for advisory guardian integrations"
+        "required": true,
+        "description": "Reputation checking module for advisory guardian hook"
       },
       {
         "path": "README.md",
@@ -49,9 +49,9 @@
         "description": "Additional documentation and development guide"
       },
       {
-        "path": "CHANGELOG.md",
-        "required": true,
-        "description": "Version history and release notes"
+        "path": "test/reputation_check.test.mjs",
+        "required": false,
+        "description": "Test suite for reputation checking functionality"
       }
     ]
   },
@@ -61,8 +61,8 @@
   "integration": {
     "clawsec-suite": {
       "enhances": [
-        "guarded_skill_install.mjs via external wrapper invocation",
-        "optional manual advisory-guardian hook wiring for reputation annotations"
+        "guarded_skill_install.mjs",
+        "clawsec-advisory-guardian hook"
       ],
       "adds_exit_codes": {
         "43": "Reputation warning - requires --confirm-reputation"
@@ -78,28 +78,11 @@
     "category": "security",
     "requires": {
       "bins": [
-        "node",
         "clawhub",
-        "openclaw"
+        "curl",
+        "jq"
       ]
     },
-    "runtime": {
-      "required_env": [],
-      "optional_env": [
-        "CLAWHUB_REPUTATION_THRESHOLD"
-      ]
-    },
-    "execution": {
-      "always": false,
-      "persistence": "No automatic persistence; setup helper performs validation only and does not rewrite other skills.",
-      "network_egress": "Reputation checks query ClawHub inspect/search endpoints for metadata and scanner summaries."
-    },
-    "operator_review": [
-      "Requires an installed clawsec-suite checkout because the enhanced installer delegates to suite guarded install flow.",
-      "This release does not auto-wire advisory-guardian hook annotations; if needed, wire hooks/clawsec-advisory-guardian/lib/reputation.mjs manually into the suite hook.",
-      "Reputation results are heuristic and can produce false positives; installation still requires explicit user confirmation for risky skills.",
-      "Run the setup helper to confirm local paths before using the enhanced installer command."
-    ],
     "triggers": [
       "clawhub reputation",
       "skill reputation check",

skills/clawsec-clawhub-checker/test/reputation_check.test.mjs

@@ -13,8 +13,6 @@
  */
 
 import { fileURLToPath } from "node:url";
-import fs from "node:fs/promises";
-import os from "node:os";
 import path from "node:path";
 import { spawn } from "node:child_process";
 
@@ -60,37 +58,6 @@ function runScript(scriptPath, args, env) {
   });
 }
 
-async function createMockClawhub(payload) {
-  const tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), "clawhub-reputation-test-"));
-  const binDir = path.join(tmpDir, "bin");
-  const mockPath = path.join(binDir, "clawhub");
-  await fs.mkdir(binDir, { recursive: true });
-  await fs.writeFile(
-    mockPath,
-    `#!/usr/bin/env node
-const payload = ${JSON.stringify(JSON.stringify(payload))};
-const command = process.argv[2] || "";
-if (command === "inspect") {
-  process.stdout.write(payload);
-  process.exit(0);
-}
-if (command === "search") {
-  process.stdout.write("name\\nmock-skill\\nother-skill\\n");
-  process.exit(0);
-}
-process.stderr.write("unexpected clawhub command: " + process.argv.slice(2).join(" ") + "\\n");
-process.exit(2);
-`,
-    "utf8",
-  );
-  await fs.chmod(mockPath, 0o755);
-
-  return {
-    env: { PATH: `${binDir}:${process.env.PATH}` },
-    cleanup: async () => fs.rm(tmpDir, { recursive: true, force: true }),
-  };
-}
-
 // -----------------------------------------------------------------------------
 // Test: Invalid skill slug is rejected (command injection prevention)
 // -----------------------------------------------------------------------------
@@ -241,59 +208,6 @@ async function testPreReleaseVersionAccepted() {
   }
 }
 
-// -----------------------------------------------------------------------------
-// Test: Explicit malicious scanner verdict blocks regardless of score
-// -----------------------------------------------------------------------------
-async function testMaliciousVirusTotalVerdictBlocks() {
-  const testName = "reputation_check: malicious VirusTotal verdict blocks install";
-  const now = Date.now();
-  const mock = await createMockClawhub({
-    skill: {
-      createdAt: now - (120 * 24 * 60 * 60 * 1000),
-      updatedAt: now - (2 * 24 * 60 * 60 * 1000),
-      stats: { downloads: 1000 },
-    },
-    owner: { handle: "trusted-publisher" },
-    version: {
-      security: {
-        status: "clean",
-        scanners: {
-          vt: {
-            normalizedStatus: "malicious",
-            analysis: "malicious verdict from scanner",
-          },
-        },
-      },
-    },
-  });
-
-  try {
-    const result = await runScript(CHECKER_SCRIPT, ['malicious-skill', '1.0.0', '70'], mock.env);
-    let parsed;
-    try {
-      parsed = JSON.parse(result.stdout);
-    } catch {
-      fail(testName, `Could not parse output: ${result.stdout}`);
-      return;
-    }
-
-    if (
-      result.code === 43 &&
-      parsed.safe === false &&
-      parsed.warnings.some((w) => w.toLowerCase().includes("malicious")) &&
-      parsed.virustotal.some((v) => v.toLowerCase().includes("malicious"))
-    ) {
-      pass(testName);
-    } else {
-      fail(testName, `Expected malicious verdict to block, got code ${result.code}: ${JSON.stringify(parsed)}`);
-    }
-  } catch (error) {
-    fail(testName, error);
-  } finally {
-    await mock.cleanup();
-  }
-}
-
 // -----------------------------------------------------------------------------
 // Test: CLI entrypoint guard works when script path is relative
 // -----------------------------------------------------------------------------
@@ -497,7 +411,6 @@ async function runTests() {
   await testUppercaseSlugRejected();
   await testEmptySlugShowsUsage();
   await testPreReleaseVersionAccepted();
-  await testMaliciousVirusTotalVerdictBlocks();
   await testRelativePathCliEntrypointWorks();
   await testInvalidThresholdRejected();
   await testEnhancedInstallerRejectsInvalidSkill();

skills/clawsec-clawhub-checker/test/setup_reputation_hook.test.mjs

@@ -1,120 +0,0 @@
-#!/usr/bin/env node
-
-import fs from "node:fs/promises";
-import path from "node:path";
-import { spawn } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import { createTempDir, pass, fail, report, exitWithResults } from "../../clawsec-suite/test/lib/test_harness.mjs";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const NODE_BIN = process.execPath;
-const SCRIPT_PATH = path.resolve(__dirname, "..", "scripts", "setup_reputation_hook.mjs");
-const REPO_ROOT = path.resolve(__dirname, "..", "..", "..");
-
-async function runScript(env) {
-  return await new Promise((resolve) => {
-    const proc = spawn(NODE_BIN, [SCRIPT_PATH], {
-      env,
-      stdio: ["ignore", "pipe", "pipe"],
-    });
-
-    let stdout = "";
-    let stderr = "";
-
-    proc.stdout.on("data", (data) => {
-      stdout += data.toString();
-    });
-
-    proc.stderr.on("data", (data) => {
-      stderr += data.toString();
-    });
-
-    proc.on("close", (code) => {
-      resolve({ code, stdout, stderr });
-    });
-  });
-}
-
-async function stageInstalledSkill(tempHome, skillName) {
-  const sourceDir = path.join(REPO_ROOT, "skills", skillName);
-  const destDir = path.join(tempHome, ".openclaw", "skills", skillName);
-  await fs.mkdir(path.dirname(destDir), { recursive: true });
-  await fs.cp(sourceDir, destDir, { recursive: true });
-  return destDir;
-}
-
-async function testPreflightSummaryNoMutation() {
-  const testName = "setup_reputation_hook: prints preflight review without mutating installed suite files";
-  const tmp = await createTempDir();
-  const homeDir = path.join(tmp.path, "home");
-
-  try {
-    await stageInstalledSkill(homeDir, "clawsec-suite");
-    await stageInstalledSkill(homeDir, "clawsec-clawhub-checker");
-
-    const result = await runScript({
-      ...process.env,
-      HOME: homeDir,
-    });
-
-    if (result.code !== 0) {
-      fail(testName, `script failed: ${result.stderr}`);
-      return;
-    }
-
-    const wrapperPath = path.join(
-      homeDir,
-      ".openclaw",
-      "skills",
-      "clawsec-suite",
-      "scripts",
-      "guarded_skill_install_wrapper.mjs",
-    );
-    const reputationModulePath = path.join(
-      homeDir,
-      ".openclaw",
-      "skills",
-      "clawsec-suite",
-      "hooks",
-      "clawsec-advisory-guardian",
-      "lib",
-      "reputation.mjs",
-    );
-    const wrapperExists = await fs
-      .access(wrapperPath)
-      .then(() => true)
-      .catch(() => false);
-    const reputationModuleExists = await fs
-      .access(reputationModulePath)
-      .then(() => true)
-      .catch(() => false);
-
-    if (
-      result.stdout.includes("Preflight review:") &&
-      result.stdout.includes("does not rewrite files in other skills") &&
-      result.stdout.includes("Recommended command:") &&
-      result.stdout.includes("alias clawsec-guarded-install") &&
-      wrapperExists === false &&
-      reputationModuleExists === false
-    ) {
-      pass(testName);
-    } else {
-      fail(testName, `missing preflight detail: ${result.stdout}`);
-    }
-  } catch (error) {
-    fail(testName, error);
-  } finally {
-    await tmp.cleanup();
-  }
-}
-
-async function runAllTests() {
-  await testPreflightSummaryNoMutation();
-  report();
-  exitWithResults();
-}
-
-runAllTests().catch((err) => {
-  console.error("Test runner failed:", err);
-  process.exit(1);
-});

skills/clawsec-feed/CHANGELOG.md

@@ -1,46 +0,0 @@
-# Changelog
-
-## [0.0.8] - 2026-05-24
-
-### Changed
-- Documented the consolidated signed advisory feed as the default feed for NVD CVEs, approved community advisories, and provisional GHSA-without-CVE records.
-
-## [0.0.7] - 2026-05-14
-
-### Security
-- Added explicit signed release artifact verification instructions for standalone installs, including `checksums.json`, `checksums.sig`, `signing-public.pem`, archive hash verification, and `SKILL.md`/`skill.json` checksum checks.
-
-All notable changes to the ClawSec Feed skill will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [0.0.6] - 2026-04-14
-
-### Added
-
-- Operational notes in the skill docs that distinguish standalone feed installation from `clawsec-suite` automation responsibilities.
-- Metadata describing required standalone install tooling and operator review expectations.
-
-### Changed
-
-- Clarified that the standalone feed package does not itself create persistence, hooks, or cron jobs.
-- Declared checksum/extraction tooling used by the documented install flow (`bash`, `shasum`, `unzip`) in skill metadata.
-- Normalized product naming in the skill docs to use OpenClaw terminology.
-
-### Security
-
-- Made release-provenance and checksum verification expectations explicit for standalone installations on production hosts.
-
-## [0.0.5] - 2026-02-28
-
-### Added
-
-- Exploitability-focused advisory guidance, including filtering and prioritization examples.
-- Notification examples that include exploitability context and rationale.
-
-### Changed
-
-- Clarified exploitability scoring guidance to match runtime values (`high|medium|low|unknown`).
-- Updated response-priority guidance to align with exploitability-first triage.
-- De-duplicated exploitability filtering guidance in `SKILL.md` by pointing to canonical docs in `wiki/exploitability-scoring.md` and `clawsec-suite`.

skills/clawsec-feed/README.md

@@ -2,13 +2,6 @@
 
 Security advisory feed monitoring for AI agents. Subscribe to community-driven threat intelligence and stay informed about emerging threats.
 
-## Operational Notes
-
-- Required runtime for standalone installation: `bash`, `curl`, `jq`, `shasum`, `unzip`
-- This package is advisory data plus install/update guidance; it does not create local persistence by itself
-- Automated polling, installed-skill cross-referencing, and hook/cron behavior live in `clawsec-suite`
-- Verify release provenance and checksums before installing the standalone artifact on production hosts
-
 ## Features
 
 - **Real-time Advisories** - Get notified about malicious skills, vulnerabilities, and attack patterns
@@ -69,4 +62,4 @@ HIGH - GA-2026-016: Vulnerable skill "data-helper"
 
 ## License
 
-GNU AGPL v3.0 or later - [Prompt Security](https://prompt.security)
+MIT License - [Prompt Security](https://prompt.security)

skills/clawsec-feed/SKILL.md

@@ -1,27 +1,20 @@
 ---
 name: clawsec-feed
-version: 0.0.8
-description: Security advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suite or the operator.
+version: 0.0.4
+description: Security advisory feed with automated NVD CVE polling for OpenClaw-related vulnerabilities. Updated daily.
 homepage: https://clawsec.prompt.security
 metadata: {"openclaw":{"emoji":"📡","category":"security"}}
 clawdis:
   emoji: "📡"
   requires:
-    bins: [bash, curl, jq, shasum, unzip]
+    bins: [curl, jq]
 ---
 
 # ClawSec Feed 📡
 
 Security advisory feed monitoring for AI agents. Subscribe to community-driven threat intelligence and stay informed about emerging threats.
 
-The default `feed.json` is the consolidated agent feed. It includes NVD CVEs, approved community advisories, and provisional GitHub Security Advisories that do not have CVE IDs yet.
-
-## Operational Notes
-
-- Required runtime for standalone installation: `bash`, `curl`, `jq`, `shasum`, `unzip`
-- Side effects: standalone install only writes local skill files
-- Network behavior: downloads release metadata/artifacts and, if you choose to poll manually, fetches the advisory feed
-- Trust model: this package does not itself create cron jobs or submit data externally; automation is delegated to `clawsec-suite` or your own scheduler
+This feed is automatically updated daily with CVEs related to OpenClaw, clawdbot, and Moltbot from the NIST National Vulnerability Database (NVD).
 
 **An open source project by [Prompt Security](https://prompt.security)**
 
@@ -59,8 +52,6 @@ Install clawsec-feed independently without the full suite.
 
 Continue below for standalone installation instructions.
 
-Standalone installation is a network download workflow. Verify the release source and the provided checksums before installing it on production hosts.
-
 ---
 
 Installation Steps:
@@ -81,86 +72,6 @@ Once you have this skill file, proceed to **[Deploy ClawSec Feed](#deploy-clawse
 
 ---
 
-
-## Release Artifact Verification
-
-For standalone installs, verify the signed release manifest before trusting `SKILL.md`, `skill.json`, or the archive. The `skill.json` file is the package metadata/SBOM source, and the release pipeline signs `checksums.json` with the ClawSec release key.
-
-```bash
-set -euo pipefail
-
-SKILL_NAME="clawsec-feed"
-VERSION="0.0.8"
-REPO="prompt-security/clawsec"
-TAG="${SKILL_NAME}-v${VERSION}"
-BASE="https://github.com/${REPO}/releases/download/${TAG}"
-ZIP_NAME="${SKILL_NAME}-v${VERSION}.zip"
-TMP_DIR="$(mktemp -d)"
-trap 'rm -rf "$TMP_DIR"' EXIT
-
-RELEASE_PUBKEY_SHA256="711424e4535f84093fefb024cd1ca4ec87439e53907b305b79a631d5befba9c8"
-
-curl -fsSL "$BASE/checksums.json" -o "$TMP_DIR/checksums.json"
-curl -fsSL "$BASE/checksums.sig" -o "$TMP_DIR/checksums.sig"
-curl -fsSL "$BASE/signing-public.pem" -o "$TMP_DIR/signing-public.pem"
-curl -fsSL "$BASE/$ZIP_NAME" -o "$TMP_DIR/$ZIP_NAME"
-curl -fsSL "$BASE/SKILL.md" -o "$TMP_DIR/SKILL.md"
-curl -fsSL "$BASE/skill.json" -o "$TMP_DIR/skill.json"
-
-ACTUAL_PUBKEY_SHA256="$(openssl pkey -pubin -in "$TMP_DIR/signing-public.pem" -outform DER | shasum -a 256 | awk '{print $1}')"
-if [ "$ACTUAL_PUBKEY_SHA256" != "$RELEASE_PUBKEY_SHA256" ]; then
-  echo "ERROR: signing-public.pem fingerprint mismatch" >&2
-  exit 1
-fi
-
-openssl base64 -d -A -in "$TMP_DIR/checksums.sig" -out "$TMP_DIR/checksums.sig.bin"
-openssl pkeyutl -verify -rawin -pubin \
-  -inkey "$TMP_DIR/signing-public.pem" \
-  -sigfile "$TMP_DIR/checksums.sig.bin" \
-  -in "$TMP_DIR/checksums.json" >/dev/null
-
-hash_file() {
-  if command -v shasum >/dev/null 2>&1; then
-    shasum -a 256 "$1" | awk '{print $1}'
-  else
-    sha256sum "$1" | awk '{print $1}'
-  fi
-}
-
-verify_manifest_file() {
-  asset="$1"
-  path="$2"
-  expected="$(jq -r --arg asset "$asset" '.files[$asset].sha256 // empty' "$TMP_DIR/checksums.json")"
-  if [ -z "$expected" ]; then
-    echo "ERROR: checksums.json missing $asset" >&2
-    exit 1
-  fi
-  actual="$(hash_file "$path")"
-  if [ "$actual" != "$expected" ]; then
-    echo "ERROR: checksum mismatch for $asset" >&2
-    exit 1
-  fi
-}
-
-expected_archive="$(jq -r '.archive.sha256 // empty' "$TMP_DIR/checksums.json")"
-if [ -z "$expected_archive" ]; then
-  echo "ERROR: checksums.json missing archive.sha256" >&2
-  exit 1
-fi
-actual_archive="$(hash_file "$TMP_DIR/$ZIP_NAME")"
-if [ "$actual_archive" != "$expected_archive" ]; then
-  echo "ERROR: archive checksum mismatch" >&2
-  exit 1
-fi
-
-verify_manifest_file "SKILL.md" "$TMP_DIR/SKILL.md"
-verify_manifest_file "skill.json" "$TMP_DIR/skill.json"
-
-echo "Signed release manifest, archive, SKILL.md, and skill.json verified."
-```
-
-Only install or extract the archive after this verification succeeds.
-
 ## Deploy ClawSec Feed
 
 Installation steps:
@@ -407,9 +318,7 @@ curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL"
       "description": "Skill sends user data to external server",
       "affected": ["helper-plus@1.0.0", "helper-plus@1.0.1"],
       "action": "Remove immediately",
-      "published": "2026-02-01T10:00:00Z",
-      "exploitability_score": "critical",
-      "exploitability_rationale": "Trivially exploitable through normal skill usage; no special conditions required. Active exploitation observed in the wild."
+      "published": "2026-02-01T10:00:00Z"
     }
   ]
 }
@@ -476,42 +385,6 @@ fi
 echo "$RECENT"
 ```
 
-### Filter by exploitability score
-
-Shared exploitability prioritization guidance is maintained in:
-
-- [`wiki/exploitability-scoring.md`](../../wiki/exploitability-scoring.md)
-- [`skills/clawsec-suite/SKILL.md`](../clawsec-suite/SKILL.md) ("Quick feed check")
-
-### Get exploitability context for an advisory
-
-```bash
-# Show exploitability details for a specific CVE
-CVE_ID="CVE-2026-27488"
-echo "$FEED" | jq --arg cve "$CVE_ID" '.advisories[] | select(.id == $cve) | {
-  id: .id,
-  severity: .severity,
-  exploitability_score: .exploitability_score,
-  exploitability_rationale: .exploitability_rationale,
-  title: .title
-}'
-```
-
-### Prioritize advisories by exploitability
-
-```bash
-# Sort advisories by exploitability (critical → high → medium → low)
-# This helps agents focus on the most immediately actionable threats
-echo "$FEED" | jq '[.advisories[] | select(.exploitability_score != null)] |
-  sort_by(
-    if .exploitability_score == "critical" then 0
-    elif .exploitability_score == "high" then 1
-    elif .exploitability_score == "medium" then 2
-    elif .exploitability_score == "low" then 3
-    else 4 end
-  )'
-```
-
 ---
 
 ## Cross-Reference Installed Skills
@@ -603,75 +476,23 @@ done
 
 ---
 
-## Prioritizing High-Exploitability Threats
-
-**IMPORTANT:** When reviewing advisories, always prioritize by **exploitability score** in addition to severity. The exploitability score indicates how easily a vulnerability can be exploited in practice, helping you focus on the most actionable threats.
-
-### Exploitability Priority Levels
-
-| Exploitability | Meaning | Action Priority |
-|----------------|---------|-----------------|
-| `high` | Trivially or easily exploitable with public tooling | **Immediate notification** |
-| `medium` | Exploitable but requires specific conditions | **Standard notification** |
-| `low` | Difficult to exploit or theoretical | **Low priority notification** |
-
-### How to Use Exploitability in Notifications
-
-1. **Filter for high-exploitability first:**
-   ```bash
-   # Get high exploitability advisories
-   echo "$FEED" | jq '.advisories[] | select(.exploitability_score == "high")'
-   ```
-
-2. **Include exploitability in notifications:**
-   ```
-   📡 ClawSec Feed: High-exploitability alert
-
-   CRITICAL - CVE-2026-27488 (Exploitability: HIGH)
-     → Trivially exploitable RCE in skill-loader v2.1.0
-     → Public exploit code available
-     → Recommended action: Immediate removal or upgrade to v2.1.1
-   ```
-
-3. **Prioritize by both severity AND exploitability:**
-   - A HIGH severity + HIGH exploitability CVE is more urgent than a CRITICAL severity + LOW exploitability CVE
-   - Focus user attention on threats that are both severe and easily exploitable
-   - Include the exploitability rationale to help users understand the risk context
-
-### Example Notification Priority Order
-
-When multiple advisories exist, present them in this order:
-1. **Critical severity + High exploitability** - most urgent
-2. **High severity + High exploitability**
-3. **Critical severity + Medium/Low exploitability**
-4. **High severity + Medium/Low exploitability**
-5. **Medium/Low severity** (any exploitability)
-
-This ensures you alert users to the most actionable, immediately dangerous threats first.
-
----
-
 ## When to Notify Your User
 
 **Notify Immediately (Critical):**
 - New critical advisory affecting an installed skill
 - Active exploitation detected
-- **High exploitability score** (regardless of severity)
 
 **Notify Soon (High):**
 - New high-severity advisory affecting installed skills
 - Failed to fetch advisory feed (network issue?)
-- Medium exploitability with high severity
 
 **Notify at Next Interaction (Medium):**
 - New medium-severity advisories
 - General security updates
-- Low exploitability advisories
 
 **Log Only (Low/Info):**
 - Low-severity advisories (mention if user asks)
 - Feed checked, no new advisories
-- Theoretical vulnerabilities (low exploitability, low severity)
 
 ---
 
@@ -682,13 +503,11 @@ This ensures you alert users to the most actionable, immediately dangerous threa
 ```
 📡 ClawSec Feed: 2 new advisories since last check
 
-CRITICAL - GA-2026-015: Malicious prompt pattern "ignore-all" (Exploitability: HIGH)
+CRITICAL - GA-2026-015: Malicious prompt pattern "ignore-all"
   → Detected prompt injection technique. Update your system prompt defenses.
-  → Exploitability: Easily exploitable with publicly documented techniques.
 
-HIGH - GA-2026-016: Vulnerable skill "data-helper" v1.2.0 (Exploitability: MEDIUM)
+HIGH - GA-2026-016: Vulnerable skill "data-helper" v1.2.0
   → You have this installed! Recommended action: Update to v1.2.1 or remove.
-  → Exploitability: Requires specific configuration; not trivially exploitable.
 ```
 
 ### If nothing new:
@@ -783,7 +602,7 @@ fi
 
 | Variable | Description | Default |
 |----------|-------------|---------|
-| `CLAWSEC_FEED_URL` | Custom advisory feed URL | Consolidated signed feed |
+| `CLAWSEC_FEED_URL` | Custom advisory feed URL | Raw GitHub (`main` branch) |
 | `CLAWSEC_INSTALL_DIR` | Installation directory | `~/.openclaw/skills/clawsec-feed` |
 
 ---
@@ -852,6 +671,6 @@ fi
 
 ## License
 
-GNU AGPL v3.0 or later - See repository for details.
+MIT License - See repository for details.
 
 Built with 📡 by the [Prompt Security](https://prompt.security) team and the agent community.