Huo15 Openclaw Security Reviewv1.0.0

Before merging a pull request, automatically scan all changed files for six categories of vulnerabilities including secrets, injection, and XSS. Outputs a graded report with CWE references and repairs only after user approval.

Before open-sourcing a private repository, scan for hardcoded API keys, passwords, and other sensitive information in the commit history. Provides commands to scrub secrets without automatically altering Git history.

After a security incident, review the current branch for similar vulnerabilities. Reuses the same scanning matrix to identify residual risks and generate a prioritized fix list.

As part of a CI/CD pipeline, run the skill on the release branch to ensure no known dependency with a CVE is introduced, no IDOR endpoints are exposed, and no secrets are leaked before production deployment.

Offer basic scanning (e.g., 50 scans/month) for free to individual developers, with unlimited scans, prioritized reports, and integration support for teams and enterprises on paid plans.

Provide a managed service where security experts use the tool to conduct in-depth audits for enterprise clients, including custom rules and remediation handholding.

Package the skill as a plugin for popular CI/CD platforms (GitHub Actions, GitLab CI, Jenkins) and charge per execution or via a marketplace subscription.