clawsec-nanoclaw
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements comprehensive security controls for monitoring NanoClaw bot deployments.
- Advisory Monitoring: Fetches and verifies security advisories from the vendor's domain (
clawsec.prompt.security) using Ed25519 signatures. - Signature Verification: Provides tools to verify the authenticity and integrity of skill packages before installation using pinned public keys.
- File Integrity: Implements a file integrity monitoring system with SHA-256 baselines and a hash-chained audit log to detect and revert unauthorized changes to critical configuration files.
- Secure Defaults: Employs strict path validation, containment checks, and symlink protection across all file operations and IPC handlers.
Audit Metadata