ClawSecure: Security Platform for OpenClaw Ecosystem
What ClawSecure Does
ClawSecure is a security platform dedicated entirely to the OpenClaw ecosystem, designed to protect against hackers, scammers, and compromised dependencies in the fast-moving skill ecosystem.
3-Layer Audit Protocol
- L1: Proprietary Engine - Uses 55+ detection patterns built for OpenClaw skill format. Catches C2 beaconing, webhook-based exfiltration, config.json manipulation, credential harvesting, and prompt injection embedded in skill instructions. Context-aware to distinguish normal agent behavior from suspicious activity.
- L2: Static and Behavioral Code Analysis - Includes YARA matching, dataflow tracing, eval() detection, and base64 payload identification.
- L3: Supply Chain - Scans every npm dependency against OSV.dev for known CVEs.
Watchtower Continuous Monitoring
- Tracks SHA-256 hashes on all audited skills every 12 hours
- Detects code drift post-install
- If a skill mutates after installation, Watchtower flags it and triggers a fresh audit
- Addresses the reality that a clean skill today doesn't guarantee a clean skill tomorrow
Additional Security Features
- Secures agent marketplaces and agent identity protocols to create a trust layer across the ecosystem
- Provides full coverage across all 10 categories of the OWASP Agentic Security Initiatives (ASI) framework
- Each finding maps to a specific ASI category (supply chain, code execution, memory/context manipulation, cascading failures, etc.)
Current Status
The platform has audited 3,000+ of the most popular OpenClaw skills so far. It's available free with no signup required and is built specifically for OpenClaw only.
📖 Read the full source: r/clawdbot
👀 See Also
Claude's Conversation Search Tool Still Returns Deleted Chats
A Claude Pro user discovered that deleted conversations remain retrievable through Claude's conversation search tool, returning substantive content including titles, message counts, and excerpts despite the chat links being dead.
NPM Compromise via Axios Backdoor: Impact on AI Coding Agents
On March 31, 2026, a DPRK-linked threat actor compromised npm by publishing backdoored versions of Axios (1.14.1 and 0.30.4) during a 3-hour window. The malware injected a dependency that downloaded a platform-specific RAT, harvested credentials, and self-erased, with AI coding agents like Claude Code and Cursor being particularly vulnerable due to automated npm installs.
MCP Package Security Scan Reveals Widespread Destructive Capabilities Without Confirmation
A security scan of 2,386 MCP packages on npm found 63.5% expose destructive operations like file deletion and database drops without requiring human confirmation. The researcher discovered 49% had security issues overall, with 402 critical and 240 high severity vulnerabilities.
FlyTrap Attack Uses Adversarial Umbrellas to Compromise Camera-Based Autonomous Drones
UC Irvine researchers developed FlyTrap, a physical attack framework that uses painted umbrellas to exploit vulnerabilities in camera-based autonomous target tracking systems. The attack reduces tracking distances to dangerous levels, enabling drone capture, sensor attacks, or physical collisions.