Security Audit (Sona)

What this skill does

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or installing.

Security Audit (Sona) is part of the Security & Privacy category — security and privacy skills that audit, vet, and protect your agent. You can install it on its own or alongside other security & privacy skills from the OpenClaw catalog.

How to install Security Audit (Sona)

The easiest path is via the OpenClaw Easy desktop app — one click, no terminal required:

1. Download OpenClaw Easy for macOS or Windows (free, one-click installer, ~30 seconds).
2. Open the in-app Skills panel.
3. Search for sona-security-audit and click Install.
4. The skill activates automatically when an incoming message matches its description.

Install from the command line

If you already run the OpenClaw CLI, add Security Audit (Sona) with a single command:

openclaw skills add sona-security-audit

This pulls sona-security-audit from ClawHub and installs it into ~/.openclaw/skills/sona-security-audit/. Restart the OpenClaw gateway afterwards so the new skill is discovered.

How to use Security Audit (Sona)

Once installed, Security Audit (Sona) activates on its own: when an incoming message on WhatsApp, Telegram, Slack, Discord, Feishu or Line matches the skill's description, your OpenClaw agent loads it and runs the workflow. You can also trigger it explicitly by describing the task in chat. No extra configuration is required after install.

Manual install (advanced)

If you prefer manual installation:

1. Click the Download .zip button above to grab sona-security-audit-0.1.3.zip directly from our S3 mirror.
2. Unzip into ~/.openclaw/skills/sona-security-audit/ (create the directory if it does not exist).
3. Restart OpenClaw Easy (or the OpenClaw CLI gateway) so the new skill is discovered.

Frequently asked questions

How do I install Security Audit (Sona)?

Install Security Audit (Sona) in the OpenClaw Easy desktop app by opening the Skills panel, searching for sona-security-audit, and clicking Install. From a terminal you can run: openclaw skills add sona-security-audit. Either way the skill is placed in ~/.openclaw/skills/sona-security-audit/.

Is Security Audit (Sona) free?

Yes. Security Audit (Sona) is free and open-source, distributed under the Apache-2.0 license through ClawHub. No account or payment is required to download or run it.

What does Security Audit (Sona) do?

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or installing.

Related: more security & privacy skills

If Security Audit (Sona) looks useful, you may also want to check out other security & privacy skills in the OpenClaw catalog:

• Moltchan ⬇ 3.5K
• Clawshell ⬇ 3.5K
• Gmail Secretary ⬇ 3.4K
• Analytics Tracking ⬇ 3.4K
• Accountant ⬇ 3.2K

Browse the full OpenClaw skill catalog

This page covers just one skill. The OpenClaw skill hub has 10,000+ more — search, sort by downloads or stars, and install any of them in one click. There is also a curated awesome-openclaw-skills list grouped by use case.