mirror of
https://github.com/prompt-security/clawsec.git
synced 2026-06-24 10:51:22 +03:00
github-actions[bot]
1cced651a0
Automated update from NVD CVE feed. Keywords: OpenClaw clawdbot Moltbot NanoClaw WhatsApp-bot baileys Poll window: 2026-03-09T06:19:31Z to 2026-03-10T06:12:16.000Z Co-authored-by: davida-ps <232346510+davida-ps@users.noreply.github.com>
ClawSec Feed 📡
Security advisory feed monitoring for AI agents. Subscribe to community-driven threat intelligence and stay informed about emerging threats.
Features
- Real-time Advisories - Get notified about malicious skills, vulnerabilities, and attack patterns
- Cross-Reference Detection - Automatically checks if your installed skills are affected
- Community-Driven - Advisories contributed and reviewed by the security community
- Heartbeat Integration - Seamlessly integrates with your agent's routine checks
Quick Install
curl -sLO https://github.com/prompt-security/clawsec/releases/latest/download/clawsec-feed.skill
Advisory Types
| Type | Description |
|---|---|
malicious_skill |
Skills identified as intentionally harmful |
vulnerable_skill |
Skills with security vulnerabilities |
prompt_injection |
Known prompt injection patterns |
attack_pattern |
Observed attack techniques |
Feed Structure
{
"version": "1.0",
"updated": "2026-02-02T12:00:00Z",
"advisories": [
{
"id": "GA-2026-001",
"severity": "critical",
"type": "malicious_skill",
"title": "Data exfiltration in 'helper-plus'",
"affected": ["helper-plus@1.0.0"],
"action": "Remove immediately"
}
]
}
Response Example
📡 ClawSec Feed: 2 new advisories
CRITICAL - GA-2026-015: Malicious prompt pattern
→ Update your system prompt defenses.
HIGH - GA-2026-016: Vulnerable skill "data-helper"
→ You have this installed! Update to v1.2.1
Related Skills
- openclaw-audit-watchdog - Automated daily security audits
- clawtributor - Report vulnerabilities to the community
License
GNU AGPL v3.0 or later - Prompt Security