ClawPentest

ClawPentest is a security audit skill that performs static analysis of OpenClaw skill files before you install them. It detects malicious patterns including prompt injection, unauthorized credential access, unauthorized outbound calls, and social engineering attempts embedded in skill files.

Includes:

• 5-category review methodology with CRITICAL/HIGH/MEDIUM/LOW/INFO severity ratings
• 20 named attack patterns with regex-ready detection signatures
• 18-entry CAP (Claw Attack Patterns) database — the CVE equivalent for OpenClaw agent security
• Self-improving adversarial training loop: one model plants vulnerabilities, another detects them, a third judges and grows the CAP database
• 100% detection rate validated on first training iteration
• Terminal-formatted structured security reports

Protect your production OpenClaw deployments. Run ClawPentest before installing any third-party skill.