ClawSecure: Security Platform for OpenClaw Ecosystem
What ClawSecure Does
ClawSecure is a security platform dedicated entirely to the OpenClaw ecosystem, designed to protect against hackers, scammers, and compromised dependencies in the fast-moving skill ecosystem.
3-Layer Audit Protocol
- L1: Proprietary Engine - Uses 55+ detection patterns built for OpenClaw skill format. Catches C2 beaconing, webhook-based exfiltration, config.json manipulation, credential harvesting, and prompt injection embedded in skill instructions. Context-aware to distinguish normal agent behavior from suspicious activity.
- L2: Static and Behavioral Code Analysis - Includes YARA matching, dataflow tracing, eval() detection, and base64 payload identification.
- L3: Supply Chain - Scans every npm dependency against OSV.dev for known CVEs.
Watchtower Continuous Monitoring
- Tracks SHA-256 hashes on all audited skills every 12 hours
- Detects code drift post-install
- If a skill mutates after installation, Watchtower flags it and triggers a fresh audit
- Addresses the reality that a clean skill today doesn't guarantee a clean skill tomorrow
Additional Security Features
- Secures agent marketplaces and agent identity protocols to create a trust layer across the ecosystem
- Provides full coverage across all 10 categories of the OWASP Agentic Security Initiatives (ASI) framework
- Each finding maps to a specific ASI category (supply chain, code execution, memory/context manipulation, cascading failures, etc.)
Current Status
The platform has audited 3,000+ of the most popular OpenClaw skills so far. It's available free with no signup required and is built specifically for OpenClaw only.
📖 Read the full source: r/clawdbot
👀 See Also
Agent Passport: Identity Verification for AI Agents
Agent Passport is an open-source identity verification layer using Ed25519 authentication and JWT tokens for AI agents, addressing the problem of agent impersonation.
Security Analysis of Extracting OpenClaw Components for Custom AI Agents
A developer analyzed OpenClaw's source code to determine which components can be safely extracted for use in custom AI agents, scoring each using the Lethal Quartet framework. The analysis reveals significant security risks in components like Semantic Snapshots and BrowserClaw.
Hackerbot-Claw: AI Bot Exploiting GitHub Actions Workflows
An AI-powered bot called hackerbot-claw executed a week-long automated attack campaign against CI/CD pipelines, achieving remote code execution in at least 4 out of 6 targets including Microsoft, DataDog, and CNCF projects. The bot used 5 different exploitation techniques and exfiltrated a GitHub token with write permissions.
RunLobster Hosting Warning: Bot Spam and Unauthorized Charges Reported
A Reddit user reports RunLobster (OpenClaw Hosting) bots spamming tech subreddits and hitting their card with three unauthorized charges immediately after registration, with no response from support.