Security agent that inventories installed OpenClaw skills, analyzes them for threats, and syncs results to your Clawned dashboard.
Scanned 9/7/2026
Install to Claude Code
npx -y skills add modbender/skill-library-mcp --skill clawned --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Clawned?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/modbender-clawned)More formats (shields.io, HTML) on the badges page.
---
name: clawned
description: Security agent that inventories installed OpenClaw skills, analyzes them for threats, and syncs results to your Clawned dashboard.
metadata:
{
"openclaw":
{
"emoji": "🛡️",
"requires": { "bins": ["python3"], "env": ["CLAWNED_API_KEY"] },
"optionalEnv": ["CLAWNED_SERVER"],
"homepage": "https://clawned.io",
},
}
---
# Clawned — Security Agent for OpenClaw
Automatically discovers all installed skills, analyzes them for security threats, and syncs results to your Clawned dashboard.
## Setup
Configure your API key in `openclaw.json`:
```json
{
"skills": {
"entries": {
"clawned": {
"enabled": true,
"env": {
"CLAWNED_API_KEY": "cg_your_api_key_here",
"CLAWNED_SERVER": "https://api.clawned.io"
}
}
}
}
}
```
## Commands
### Sync all installed skills to dashboard
```bash
python3 {baseDir}/scripts/agent.py sync
```
### Scan a single skill locally
```bash
python3 {baseDir}/scripts/agent.py scan --path <skill-directory>
```
### List all discovered skills
```bash
python3 {baseDir}/scripts/agent.py inventory
```
### Check agent status
```bash
python3 {baseDir}/scripts/agent.py status
```
## Data & Privacy
**During `sync` (default operation):**
- Sends only skill metadata: name, owner, slug, version
- No file contents are uploaded
- No `.env` files or secrets are ever read
**During `scan --path` (explicit user action only):**
- Reads source files (`.md`, `.py`, `.js`, etc.) from the specified skill directory for analysis
- `.env` files are excluded from scanning
- File contents are sent to the Clawned server for security analysis
**Local config access:**
- Reads `~/.openclaw/openclaw.json` only to locate skill directories (extraDirs paths)
- No credentials or secrets are read from config files
## Automatic Sync
Schedule every 6 hours via OpenClaw cron:
```json
{
"jobs": [
{
"schedule": "0 */6 * * *",
"command": "Run clawned sync to check all installed skills",
"description": "Security scan every 6 hours"
}
]
}
```
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!