Explore ClawSecure's OpenClaw Security Research on GitHub
ClawSecure's public GitHub repo: OpenClaw security API docs, OWASP ASI mapping, 17-capability table, and security research for the OpenClaw developer community.
🛡️
ClawSecure Team
Security Research
Developers and security researchers looking for OpenClaw security resources on GitHub now have a dedicated hub for documentation, API reference, and community engagement. ClawSecure has launched a public GitHub repository, providing open access to the security research, audit methodology, and technical documentation behind the platform that has audited 2,890+ skills from the community-curated awesome-openclaw-skills list and the openclaw/skills repository. If you have been searching for an OpenClaw security scanner on GitHub or an ai agent security scanner with public documentation, this repository is the starting point. This article covers what the repository contains, how developers can use the Security Clearance API, and how the project fits into ClawSecure's mission as the integrity layer for AI agent skills and workflows.
What the OpenClaw Security GitHub Repository Contains
The public GitHub repository is a documentation and research resource, not a source code release. ClawSecure's codebase is proprietary, purpose-built for the OpenClaw ecosystem with 55+ threat patterns and a 3-Layer Audit Protocol that has detected 9,515 individual findings across 2,890+ audited skills. The repository makes the technical documentation, audit methodology, and community tools freely available under an MIT license so that developers, researchers, and security teams can evaluate and build on the work without needing access to the proprietary engine itself.
Inside the repository, developers will find a comprehensive README with a 17-row capability table covering every ClawSecure feature, from the proprietary behavioral engine and Watchtower continuous monitoring to the Security Clearance API and OWASP ASI coverage mapping. The README also includes four graphics with keyword-optimized alt-text, quick-start instructions for scanning your first skill, and links to every resource a developer or security researcher needs to get started. With 20 keyword-optimized topics across the documentation, the repo is designed to be discoverable by anyone researching OpenClaw security on GitHub or evaluating ai agent security tools.
OWASP ASI Top 10 Coverage Mapping for OpenClaw Security
One of the most valuable resources in the repository is the detailed OWASP ASI coverage mapping document at docs/OWASP-ASI.md. The OWASP Top 10 for Agentic Applications, released in December 2025 by the OWASP Agentic Security Initiative, defines the security standard for autonomous AI agents. ClawSecure provides comprehensive OWASP ASI Top 10 coverage across all ten risk categories, and the mapping document shows exactly how each category is addressed by specific detection capabilities.
The document maps each OWASP ASI risk, from ASI-01 (Agent Goal Hijack) and ASI-02 (Tool Misuse) through ASI-09 (Human-Agent Trust Exploitation) and ASI-10 (Rogue Agents), to specific ClawSecure audit layers and mitigation strategies. For security teams evaluating OpenClaw deployments against industry standards, this mapping provides a structured verification that scanning infrastructure covers every category in the agentic security framework. For a full explanation of each OWASP ASI category and how it manifests in the OpenClaw ecosystem, see our complete OWASP ASI Top 10 guide on the ClawSecure blog.
OpenClaw Security API Documentation for Developers
The Security Clearance API enables programmatic access to ClawSecure's OpenClaw security audit infrastructure. Developers building OpenClaw workflows, marketplace integrations, or automated deployment pipelines can query any skill's security status in real time. The API documentation in the repository at docs/API.md provides endpoint specifications, authentication details, request and response formats, and example integrations for common developer scenarios.
The API returns structured data including the overall security score, individual finding details, severity classifications, and Watchtower monitoring status for any audited skill. This means developers can build pre-installation verification directly into their own tools, CI/CD pipelines, and automation workflows without requiring users to visit clawsecure.ai manually. The OpenClaw security API is part of what makes ClawSecure more than a scanner. It is the runtime verification infrastructure that provides continuous security clearance for the OpenClaw ecosystem, enabling any tool or platform to verify skill integrity programmatically.
How to Report Suspicious OpenClaw Skills on GitHub
The repository includes structured issue templates for the community to report suspicious skills directly on GitHub. If you encounter an OpenClaw skill that exhibits unusual behavior, makes unexpected network connections, or triggers security concerns, you can file a structured report that guides you through providing the information ClawSecure needs to investigate: the skill name, ClawHub URL, observed behavior, and any relevant technical details.
This community reporting channel complements ClawSecure's automated scanning and Watchtower monitoring. While ClawSecure's 3-Layer Audit Protocol has identified that 41% of popular OpenClaw skills have security vulnerabilities, community reports help surface emerging threats that may not yet be captured in automated detection signatures. The ClawHavoc malware campaign, which has compromised hundreds of skills in the ecosystem, was first identified through the kind of community vigilance these issue templates are designed to support. Combined with the data from 2,890+ audited skills, community intelligence strengthens the overall security posture of the ecosystem.
Contributing to OpenClaw Security Research on GitHub
The repository welcomes contributions from the security research community. The CONTRIBUTING.md file outlines how researchers can submit findings, suggest new detection patterns, improve documentation, and participate in the ongoing effort to secure the OpenClaw ecosystem. The SECURITY.md file provides responsible disclosure guidelines for anyone who discovers vulnerabilities in ClawSecure's own infrastructure.
ClawSecure was built on the principle that ai agent security infrastructure should be transparent about its methodology even when the implementation is proprietary. The 3-Layer Audit Protocol documentation, the OWASP ASI mapping, and the OpenClaw security API reference are all publicly available so the community can evaluate, critique, and build on the research. This transparency is essential for trust. An integrity layer for the agentic internet requires community confidence in how security assessments are conducted, and the public GitHub repository is how ClawSecure delivers that transparency.
Star the Repo and Start Scanning OpenClaw Skills
If you work with OpenClaw, whether as a user installing community skills, a developer creating them, or a security professional evaluating the ecosystem, the public GitHub repository gives you direct access to ClawSecure's research and documentation. Star the repository to stay updated as new documentation, detection patterns, and community resources are added. It is important to note that while this is a public repository, ClawSecure is not open source. The proprietary engine, behavioral analysis, and Watchtower monitoring system remain ClawSecure's core intellectual property. The repository provides documentation, research, and community tools, not the underlying codebase.
You can scan any OpenClaw skill free at clawsecure.ai using the free OpenClaw security scanner, browse 2,890+ pre-audited skills in the Security Registry, or explore the complete Security Clearance API documentation in the GitHub repository. For the research behind the platform, read the flagship security report showing that 41% of popular OpenClaw skills have vulnerabilities, or explore how the 3-Layer Audit Protocol works. ClawSecure exists because the agentic internet needs an independent integrity layer, and this public GitHub repository is how we make that work visible, accessible, and open to community participation.
📄 Read our flagship security report: 41% of Popular OpenClaw Skills Have Security Vulnerabilities — Findings from 2,890+ Audits
Scan Any OpenClaw Skill Before Installing
Free 3-layer OpenClaw security audit with OWASP ASI Top 10 coverage and proprietary threat intelligence.