← All skills
clawsec-feed
67 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By LeoYeAI/agent-master-skills (GitHub) · coding · 2,186 stars · scanned at commit 8f88f9a
Security advisory feed with automated NVD CVE polling for OpenClaw-related vulnerabilities. Updated daily.
Works with any agent that supports SKILL.md skills.
What this skill can do
Sends data to these websites: github.com, api.github.com
This is disclosed by the author in the skill's SKILL.md or README.
Found in 12 places.
Show 9 more
- skills/clawsec-feed/SKILL.md, line 90
LATEST_TAG=$(curl -sSL --retry 3 --retry-delay 1 \ - skills/clawsec-feed/SKILL.md, line 101
if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \ - skills/clawsec-feed/SKILL.md, line 115
if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \ - skills/clawsec-feed/SKILL.md, line 215
if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \ - skills/clawsec-feed/SKILL.md, line 303
curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL" - skills/clawsec-feed/SKILL.md, line 343
if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL" -o "$TEMP_FEED"; then - skills/clawsec-feed/SKILL.md, line 443
if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$FEED_URL" -o "$TEMP_FEED"; then - skills/clawsec-feed/SKILL.md, line 714
LATEST_VERSION=$(curl -sSL --fail --show-error --retry 3 --retry-delay 1 "$LATEST_URL" 2>/dev/null | \ - skills/clawsec-feed/advisories/feed.json, line 82
"description": "OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly,
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 15 places.
Show 12 more
- skills/clawsec-feed/SKILL.md, line 299
DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json" - skills/clawsec-feed/SKILL.md, line 337
DEFAULT_FEED_URL="https://raw.githubusercontent.com/prompt-security/ClawSec/main/advisories/feed.json" - skills/clawsec-feed/SKILL.md, line 369
CRITICAL=$(echo "$FEED" | jq '.advisories[] | select(.severity == "critical")') - skills/clawsec-feed/SKILL.md, line 381
WEEK_AGO=$(TZ=UTC date -v-7d +%Y-%m-%dT00:00:00Z 2>/dev/null || TZ=UTC date -d '7 days ago' +%Y-%m-%dT00:00:00Z) - skills/clawsec-feed/SKILL.md, line 401
CVE_ID="CVE-2026-27488" - skills/clawsec-feed/SKILL.md, line 416
echo "$FEED" | jq '[.advisories[] | select(.exploitability_score != null)] | - skills/clawsec-feed/SKILL.md, line 434
INSTALL_DIR="${CLAWSEC_INSTALL_DIR:-$HOME/.openclaw/skills}" - skills/clawsec-feed/SKILL.md, line 534
echo "$FEED" | jq '.advisories[] | select(.exploitability_score == "high")' - skills/clawsec-feed/SKILL.md, line 631
STATE_FILE="$HOME/.openclaw/clawsec-feed-state.json" - skills/clawsec-feed/SKILL.md, line 678
STATE_FILE="$HOME/.openclaw/clawsec-feed-state.json" - skills/clawsec-feed/SKILL.md, line 708
INSTALL_DIR="${CLAWSEC_INSTALL_DIR:-$HOME/.openclaw/skills/clawsec-feed}" - skills/clawsec-feed/SKILL.md, line 743
EXPECTED_HASH="<hash-from-checksums.json>"
Changes files outside its own folder
The author does not mention this.
Found in 1 place.
Downloads and installs other software
The author does not mention this.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'clawsec-feed' ] || [ -L ~/.agents/skills/'clawsec-feed' ]; then echo 'A skill folder named clawsec-feed already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/LeoYeAI/agent-master-skills' "$d" && git -C "$d" checkout --quiet '8f88f9a0dd5a1075d4f0c7626f9d960844d57575' -- 'skills/clawsec-feed' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/clawsec-feed' ~/.agents/skills/'clawsec-feed' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'clawsec-feed' ~/.claude/skills/'clawsec-feed' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for LeoYeAI/agent-master-skills shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/LeoYeAI/agent-master-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 8f88f9a | 67 |
| 2026-11-07 | 8f88f9a | 67 |