🖼️

clawsec-suite

Рекомендуем

Securely manage your AI agent's environment with advisory monitoring, cryptographic verification, and approval-gated protection against malicious skills.

davida-psv1.0.0
Design & MediaOpen SourceAutomationCLIDeveloper Tool
Подключение к ВМ...
Подключение к ВМ...
npx clawhub@latest install clawsec-suite
6Звёзды
6.1kЗагрузки
20Текущие установки
v1.0.0Версия
Mar 9, 2026Обновлено

Требования

Security Feed KeyAdvisory Feed URL(optional)Security Bypass(optional)Scan Interval(optional)
Просмотр исходного кода(ClawHub)

clawsec-suite is a comprehensive security manager for AI agent environments. It provides a robust defense layer by monitoring real-time security advisories, verifying the integrity of installed skills through cryptographic signatures, and enforcing a guarded installation process to prevent the deployment of compromised or malicious tools.

Принцип работы

1

Step 1

Advisory Monitoring: It periodically polls the ClawSec advisory feed to track new security threats and vulnerabilities.
2

Step 2

Cross-Referencing: The system automatically compares the advisory feed against your locally installed skills to identify potential risks.
3

Step 3

Cryptographic Verification: It uses openssl and shasum to verify that release archives and checksum manifests are authentic and untampered.
4

Step 4

Guarded Installation: It intercepts installation requests to check for active advisories, requiring explicit user confirmation before proceeding with risky installs.

Ключевые возможности

Advisory Feed Monitoring
Automatically tracks security advisories and cross-references them with your installed skills.
Cryptographic Verification
Ensures all downloads and manifests are signed and haven't been tampered with.
Guarded Installation
Enforces a double-confirmation flow when attempting to install skills with active security advisories.
Exploitability Scoring
Prioritizes threats based on real-world exploitability context (High, Medium, Low).
Advisory Suppression
Allows security teams to review and silence specific advisories using a structured allowlist.

Требования

Security Feed Key
Used to verify the authenticity of the security advisory feed. Supports: ClawSec Public Key.

Сценарии использования

Vulnerability Management
Automatically detect if any of your agent's skills have newly discovered security flaws.
Supply Chain Security
Verify that every skill you install is cryptographically signed by a trusted source.
Automated Compliance
Use the advisory suppression system to document and track accepted security risks in your deployment.

Как установить

1
Run in your terminal
npx clawhub@latest install clawsec-suite
or
2
Click the Install button at the top of this page for one-click setup

Часто задаваемые вопросы

Отзывы

0 отзывов

Войдите, чтобы написать отзыв

Отзывов пока нет. Будьте первым, кто поделится своим опытом!