Developer Tools●●Solid
Carapace – A security-hardened Rust alternative to OpenClaw
Hardened Rust alternative to OpenClaw, but early (v0.1 preview, still rough edges).
Big BrainNiche Gem
puremachinery
204mo ago
Back to browse
GitHub Repository
Security auditor, CVE scanner, and skill analyzer for OpenClaw gateways
7 starsTypeScript
OpenClaw Carapace – Security Scanner for OpenClaw
by broskees·Mar 2, 2026·6 points·0 comments
AI Analysis
●MidNiche Gem
Hardening scanner for OpenClaw, but only useful if you're already deploying OpenClaw.
Strengths
- •24 audit rules + 225+ CVE advisories give immediate signal on gateway security posture
- •Auto-fix capability + hardening profiles reduce friction from finding→fixing cycle
- •SARIF output integrates naturally into GitHub Code Scanning and existing CI/CD pipelines
Weaknesses
- •Extremely niche—only relevant to OpenClaw users; no broader security tooling market
- •Completely dependent on OpenClaw adoption and market viability
Category
Target Audience
OpenClaw gateway operators, AI ops engineers securing agentic systems
Similar To
Trivy (container scanning) · Snyk CLI · Semgrep
Post Description
Here's Openclaw Carapace, a CLI security scanner for OpenClaw. It audits your configs, flags CVEs, and scans skill files for vulnerabilities.
A few things it does: - Auto-fix common misconfigurations - Hardening profiles for typical deployment patterns - SARIF output so it drops right into GitHub Code Scanning or your CI/CD pipeline
Would love feedback — especially on what checks or hardening rules you'd want to see next.
Similar Projects
Security●Mid
Security toolkit for OpenClaw – scanner, hardened configs, guides
Malicious OpenClaw skill scanner, but the market for hardening OpenClaw specifically is tiny.
Solve My Problem
munnam77
103mo ago
Security●●●Banger
RankClaw – AI-audited all 14,706 OpenClaw skills; 1,103 are malicious
Found 1,103 malicious skills (7.5%) that pattern matching missed; AI audit detects prompt injection in docs.
WizardryZero to OneShip It
do_anh_tu
213mo ago
Security●●●Banger
Aidevshield NPM audit for AI coding tool workflows
Scans Cursor/Cline/GitHub Actions for prompt injection and supply chain attacks—aidevshield catches real exploits.
Solve My ProblemBig Brain
GrimLabs
103mo ago
Security●●Solid
MCPSec – OWASP MCP Top Scanner for Model Context Protocol Configs
First MCP security scanner addressing early Docker Hub moment—but audience is still nascent.
Solve My ProblemNiche Gem
iamdesertpaul
203mo ago
Security●●Solid
Clawscan – Open-source security scanner for OpenClaw AI agents
Single-file, zero-dep scanner for a niche product, but OpenClaw audience is tiny.
Niche GemShip It
clawscan
103mo ago