Security suite manager with embedded advisory feed monitoring, cryptographic verification, and approval-gated malicious-skill response.

• Monitors ClawSec advisory feed for new security advisories, cross-references them against installed skills, and requires explicit user approval before removing flagged skills
• Includes cryptographic signature verification for release archives and advisory feeds using pinned public keys with out-of-band fingerprint validation
• Provides guarded skill installation with double-confirmation flow: first confirmation to install, second after reviewing advisory details if matches are found
• Embeds advisory guardian hook for OpenClaw with optional cron scheduling, plus dynamic skill catalog discovery and state tracking across sessions
• Supports advisory suppression via allowlist configuration for reviewed or non-applicable advisories, with exploitability scoring to prioritize real-world threats