picoclaw-self-pen-testing

by davida-ps

Install this Skill

curl -fsSL -o picoclaw-self-pen-testing.zip https://skill.seembox.com/api/v1/skills/picoclaw-self-pen-testing/download && unzip picoclaw-self-pen-testing.zip

Download picoclaw-self-pen-testing.zip

SKILL.md About

---
name: picoclaw-self-pen-testing
version: 0.0.1
description: Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.
homepage: https://clawsec.prompt.security
author: prompt-security
license: AGPL-3.0-or-later
picoclaw:
  emoji: "🦐"
  category: "security"
  requires:
    bins: [node]
  test_requires:
    bins: [node]
---

# Picoclaw Posture Review (separate package)

Purpose: keep Picoclaw posture-review checks isolated from the broader guardian package so moderation-sensitive checks can be versioned/published independently.

## Scope

This skill only performs local, read-only posture-review analysis against an existing Picoclaw posture profile.

It flags:
- public Web UI exposure
- disabled UI auth
- unrestricted workspace/tooling
- unsigned verification mode
- MCP trust-boundary review needs
- scheduler persistence review
- plaintext secret markers
- multi-channel auth review

## Usage

```bash
node scripts/self_pen_test.mjs --profile ~/.picoclaw/security/clawsec/current-profile.json
```

## Validation

```bash
python utils/validate_skill.py skills/picoclaw-self-pen-testing
node skills/picoclaw-self-pen-testing/test/self_pen_test.test.mjs
```

_meta.json Metadata

{
  "ownerId": "kn76m78f01hqrtpgm895s0jsax80jd8v",
  "publishedAt": 1777202573024,
  "slug": "picoclaw-self-pen-testing",
  "version": "0.0.1"
}