Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.
| Date | Stars |
|---|---|
| 2026-07-31 | 1076 |
| 2026-08-06 | 1081 |
Today
+5 stars today
This week
— stars this week
This month
— stars this month
Momentum
55.0
growth rate 0.00%/day
<p align="center">
<img src="./assets/readme/hero.webp" width="100%" alt="ClawSec security skills for AI agents, featuring the ClawSec robot and the Prompt Security from SentinelOne logo">
</p>
<p align="center">
<a href="https://clawsec.prompt.security"><strong>Website</strong></a>
·
<a href="https://clawsec.prompt.security/#/skills"><strong>Skill catalog</strong></a>
·
<a href="https://clawsec.prompt.security/feed"><strong>Security feed</strong></a>
·
<a href="./wiki/INDEX.md"><strong>Documentation</strong></a>
·
<a href="https://github.com/prompt-security/clawsec/releases"><strong>Releases</strong></a>
</p>
<p align="center">
<a href="https://github.com/prompt-security/clawsec/actions/workflows/ci.yml"><img src="https://github.com/prompt-security/clawsec/actions/workflows/ci.yml/badge.svg" alt="CI status"></a>
<a href="https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml"><img src="https://github.com/prompt-security/clawsec/actions/workflows/deploy-pages.yml/badge.svg" alt="Pages deployment status"></a>
<a href="https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml"><img src="https://github.com/prompt-security/clawsec/actions/workflows/poll-nvd-cves.yml/badge.svg" alt="NVD polling status"></a>
</p>
ClawSec is an AGPL collection of security skills and signed advisory intelligence for AI agent runtimes. It helps operators verify skill artifacts, detect configuration drift, audit agent environments, and approval-gate risky installs across **OpenClaw, NanoClaw, Hermes, and Picoclaw**.
---
## Install the OpenClaw suite
The OpenClaw entry point is `clawsec-suite`. Adding the package and activating its persistent hook are separate, reviewable steps.
### 1. Add the suite
```bash
npx skills add prompt-security/clawsec --skill clawsec-suite -a openclaw --global -y
```
This installs the suite with its signed advisory trust set, heartbeat workflow, guarded installer, and setup scripts. Optional protections remain separate packages that the suite discovers from the published catalog.
### 2. Review and enable the advisory hook
```bash
SUITE_DIR="${INSTALL_ROOT:-$HOME/.openclaw/skills}/clawsec-suite"
node "$SUITE_DIR/scripts/setup_advisory_hook.mjs"
```
The setup script prints its preflight before it changes persistent OpenClaw configuration. After it succeeds, restart the OpenClaw gateway and run `/new` once to trigger the first advisory scan.
To see the current optional protections:
```bash
node "$SUITE_DIR/scripts/discover_skill_catalog.mjs"
```
> **Installing for someone else?** Ask their agent to install `clawsec-suite` with the command above, show the hook preflight, and wait for approval before enabling the hook or optional cron job.
<details>
<summary><strong>Shell and path notes</strong></summary>
For `bash` and `zsh`, keep home variables expandable:
```bash
export INSTALL_ROOT="$HOME/.openclaw/skills"
```
Do not single-quote paths that contain `$HOME`. In PowerShell, build the path explicitly:
```powershell
$env:INSTALL_ROOT = Join-Path $HOME ".openclaw\skills"
node "$env:INSTALL_ROOT\clawsec-suite\scripts\setup_advisory_hook.mjs"
```
POSIX `.sh` workflows require WSL or Git Bash on Windows.
</details>
---
## See it work
### Detect and respond to agent-file drift
The `soul-guardian` demo changes a protected agent file, detects the mismatch, and walks through the response.
[](public/video/soul-guardian-demo.mp4)
**[Watch the MP4 with audio →](public/video/soul-guardian-demo.mp4)**
<details>
<summary><strong>Watch the suite installation walkthrough</strong></summary>
<p align="center">
<a href="./public/video/install-demo.mp4"><img src="./public/video/install-demo-preview.gif" width="320" alt="ClawSec suite installation walkthrough"></a>
</p>
<p align="center"><a href="./public/video/install-demo.mp4"><strong>Open the MP4 with audio →<Excerpt of 8,267 characters
Read on GitHub
138
54
48
8
1
Burak Bayır
1
1
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:ae4ccb20cd1e0c04, desc:drift detection