Xpersona
Claim this agent
agentCLAWHUBUnverified

test

Security and vulnerability scanner for OpenClaw code, plugins, skills, and Node.js dependencies. Powered by OpenClaw AI models. Skill: test Owner: ThomasLWang Summary: Security and vulnerability scanner for OpenClaw code, plugins, skills, and Node.js dependencies. Powered by OpenClaw AI models. Tags: latest:2.0.1 Version history: v2.0.1 | 2026-02-06T22:53:47.200Z | auto Major update: flaw0 fully replaces og-openclawguard. - Replaced all previous OpenGuardrails prompt injection features and docs with flaw0, a comprehensive security and vulnera

OpenClaw
View on ClawHub

Rank

62

Safety

84

Downloads

1.3k

Updated

Apr 15, 2026

Version

2.0.1

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 1.3K downloads reported by the source. Last updated 4/15/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Apr 15, 2026
Protocol compatibility
OpenClawcompatibility · observed Apr 15, 2026
Adoption signal
1.3K downloadsadoption · observed Apr 15, 2026
Latest release
2.0.1release · observed Feb 6, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install kn74hk8e4qtgpgss84xfhkftf180bdjr:og-openclawguard
  1. Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-thomaslwang-og-openclawguard/snapshot"

Documentation

CLAWHUB

31,394 characters of source documentation, loaded on request.

Extracted files

2 files captured from the source.

SKILL.md

---
name: flaw0
description: Security and vulnerability scanner for OpenClaw code, plugins, skills, and Node.js dependencies. Powered by OpenClaw AI models.
version: 1.0.0
author: Tom
homepage: https://github.com/yourusername/flaw0
license: MIT
metadata:
  openclaw:
    emoji: "🔍"
    category: "security"
tags:
  - security
  - vulnerability-scanner
  - code-analysis
  - dependency-checker
  - openclaw
---

# flaw0 - Zero Flaws Security Scanner

Security and vulnerability scanner for OpenClaw ecosystems. Analyzes source code, plugins, skills, and Node.js dependencies to detect potential security flaws.

**Goal: Achieve flaw 0** (zero flaws detected) 🎯

## Installation

Install this skill via [ClawHub](https://www.clawhub.ai):

```bash
npx clawhub@latest install flaw0
```

Or install globally via npm:

```bash
npm install -g flaw0
```

## When to Use This Skill

Use **flaw0** to ensure your OpenClaw code and dependencies are secure:

### Before Installing Skills

```bash
# Check a skill before installing
flaw0 scan ~/.openclaw/skills/new-skill
```

### During Development

```bash
# Scan your code as you develop
flaw0 scan src/

# Check dependencies
flaw0 deps
```

### Before Committing

```bash
# Full security audit
flaw0 audit
```

### Auditing OpenClaw Installation

```bash
# Scan all OpenClaw components
flaw0 scan --target all

# Check specific components
flaw0 scan --target skills
flaw0 scan --target plugins
flaw0 scan --target core
```

## Usage

### Basic Commands

#### Scan Code

```bash
# Scan current directory
flaw0 scan

# Scan specific directory
flaw0 scan /path/to/code

# Use specific AI model
flaw0 scan --model claude-opus-4-6
```

#### Check Dependencies

```bash
# Quick dependency scan
flaw0 deps

# Deep scan (entire dependency tree)
flaw0 deps --deep
```

#### Full Security Audit

```bash
# Comprehensive scan (code + dependencies)
flaw0 audit

# Save report to file
flaw0 audit --output report.json

# JSON output for CI/CD
flaw0 audit --json
```

#### Scan OpenClaw Components

```bash
# Scan OpenClaw core
flaw0 scan --target core

# Scan all plugins
flaw0 scan --target plugins

# Scan all skills
flaw0 scan --target skills

# Scan everything
flaw0 scan --target all
```

## What flaw0 Detects

### Code Vulnerabilities (12+ Types)

1. **Command Injection**
   - `exec()` with unsanitized input
   - Shell command construction with user input

2. **Code Injection**
   - `eval()` usage
   - `Function()` constructor with strings

3. **SQL Injection**
   - String concatenation in SQL queries
   - Unparameterized queries

4. **Cross-Site Scripting (XSS)**
   - `innerHTML` assignments
   - `dangerouslySetInnerHTML` usage

5. **Path Traversal**
   - Unvalidated file path operations
   - `readFile()` with user input

6. **Hardcoded Secrets**
   - API keys in source code
   - Passwords and tokens
   - AWS credentials

7. **Weak Cryptography**
   - MD5 and SHA1 usage
   - Weak hashing algorithms

8. **Insecure Randomness**
   - `Math.random()` f

_meta.json

{
  "ownerId": "kn74hk8e4qtgpgss84xfhkftf180bdjr",
  "slug": "og-openclawguard",
  "version": "2.0.1",
  "publishedAt": 1770418427200
}

Related agents

Same protocol, similar job.

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceUrl": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-04-15T00:45:39.800Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-thomaslwang-og-openclawguard/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-thomaslwang-og-openclawguard/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-04-15T00:45:39.800Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "1.3K downloads",
      "href": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceUrl": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-04-15T00:45:39.800Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "2.0.1",
      "href": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceUrl": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-02-06T22:53:47.200Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-thomaslwang-og-openclawguard/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-thomaslwang-og-openclawguard/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 2.0.1",
      "description": "Major update: flaw0 fully replaces og-openclawguard. - Replaced all previous OpenGuardrails prompt injection features and docs with flaw0, a comprehensive security and vulnerability scanner for OpenClaw ecosystems. - Removed all source, config, and documentation files from og-openclawguard. - SKILL.md now documents flaw0’s functionality, usage, config, scoring, and integration options. - flaw0 scans code, skills, plugins, and Node.js dependencies using OpenClaw AI models to identify a wide range of security flaws. - Provides detailed commands, CI/CD integration, flaw scoring, and examples for proactive security auditing.",
      "href": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceUrl": "https://clawhub.ai/ThomasLWang/og-openclawguard",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-02-06T22:53:47.200Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 9, 2026.

Sponsored

Ads related to test and adjacent AI workflows.