ClawHub
Tools,Security
#frisk#security-audit

Frisk

Pre-install security audit and vulnerability scanner for ClawHub skills and code plugins — scan by slug or local path, 9 threat intel sources, 7 checks including malware scanning, dependency vulnerabilities, and credential leak detection. Wedge paid API available at https://node1.tail507e53.ts.net/frisk for automated scanning at scale.

Install

openclaw plugins install clawhub:@lowwattlabs/frisk-audit

Frisk — OpenClaw Plugin

Pre-install security audit and vulnerability scanner for ClawHub skills.

Install

bash
npm i -g @lowwattlabs/frisk
openclaw plugins install clawhub:@lowwattlabs/frisk-audit

Tools

  • frisk — Run security audit on a ClawHub skill slug or local path

Requirements

  • Frisk CLI binary (frisk) — install via npm or download from GitHub Releases
  • Default binary path: /usr/local/bin/frisk

Configuration

json
{
  "frisk": {
    "binaryPath": "/usr/local/bin/frisk",
    "allowExternal": true
  }
}
  • binaryPath: Absolute path to the frisk binary. Defaults to /usr/local/bin/frisk (not PATH-resolved).
  • allowExternal: Allow network operations (threat intel sync, remote repo cloning). Default: false.

Network Disclosures

  • frisk sync connects to external threat intel feeds (CISA KEV, Feodo, EPSS, etc.). Blocked unless allowExternal: true.
  • frisk --slug <slug> clones public Git repositories. Blocked unless allowExternal: true.
  • Binary is resolved from absolute path to prevent PATH hijacking.

Links

License

MIT-0