skill-secSecurity agent that inventories installed OpenClaw skills, analyzes them for threats, and syncs results to your Clawned dashboard.
Install via ClawdBot CLI:
clawdbot install uttamnest/skill-secGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
eval(Accesses system directories or attempts privilege escalation
/etc/cronCalls external URL not in known-safe list
https://clawned.ioGenerated Mar 21, 2026
Large organizations using OpenClaw for automation can deploy Clawned to continuously monitor all installed skills for security vulnerabilities, ensuring compliance with internal policies and external regulations. It automatically inventories skills and syncs threat analysis to a central dashboard, reducing manual oversight and enabling proactive risk management.
Software development teams integrating OpenClaw skills into their workflows use Clawned to audit third-party and custom skills for security risks during development and deployment cycles. The local scan feature allows developers to analyze specific skill directories before integration, preventing potential threats from entering production environments.
MSPs managing OpenClaw installations for multiple clients implement Clawned to provide security monitoring as a service, automatically syncing skill inventories and threat data to a centralized dashboard for each client. This enables scalable oversight, regular reporting, and quick response to vulnerabilities across diverse deployments.
Open source maintainers and contributors use Clawned to validate the security of skills shared in public repositories, scanning for malicious code or vulnerabilities before distribution. The sync feature helps track changes over time, ensuring ongoing security as skills are updated and new versions are released.
Offer Clawned as a cloud-based security service with tiered subscriptions based on the number of skills monitored, frequency of scans, and dashboard features. Revenue is generated through monthly or annual fees, with premium tiers including advanced analytics, priority support, and custom integration options.
Sell perpetual or term licenses to large enterprises for on-premises or private cloud deployments of Clawned, including custom integrations, dedicated support, and compliance certifications. Revenue comes from upfront license fees, annual maintenance contracts, and optional professional services for setup and training.
Provide a free basic version of Clawned for individual users or small teams with limited scans and dashboard access, while monetizing through paid upgrades for advanced features like automated scheduling, detailed reports, API access, and team collaboration tools. Revenue is driven by conversions from free to paid plans.
💬 Integration Tip
Ensure the CLAWNED_API_KEY is securely stored in openclaw.json and consider using environment variables for production deployments to avoid hardcoding secrets. Schedule automatic syncs via OpenClaw cron jobs for continuous monitoring without manual intervention.
Scored Jun 19, 2026
AI Analysis
The skill's stated purpose is security analysis and its data collection is clearly documented, with no evidence of credential harvesting or hidden malicious instructions. The external API call (clawned.io) is consistent with its advertised function, and the rule-based signals appear to be false positives from scanning the skill's own code for analysis rather than its runtime behavior.
Audited Apr 17, 2026 · audit v1.0
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.