Install the ClawVitals Plugin

Requires OpenClaw 2026.3.13+ · No skill required; the plugin includes the full skill

$ openclaw plugins install clawhub:claw-security-vitals

Just want the skill? → npx clawhub install clawvitals

ClawVitals Plugin

The skill gives you a score in seconds, the plugin remembers it and does much more.

Skill vs Plugin

Feature Skill Plugin
Scan & score ✅ ✅
Remediation steps ✅ ✅
Experimental controls ✅ ✅
Scan history ❌ ✅
Delta detection ❌ ✅
Scheduled recurring scans ❌ ✅
Regression & critical alerts ❌ ✅
Exclusion management ❌ ✅
Expanded system-level controls ❌ ✅
Agent config file inventory (SHA256 hashes) ❌ ✅
Agent config drift detection (baseline comparison) ❌ ✅
Agent config tamper detection (prompt injection scan) ❌ ✅
Export scan reports ❌ ✅
Fleet management ❌ ✅
Posture trend dashboard ❌ ✅

ClawVitals Plugin

The skill checks your setup. The plugin watches it over time, catching regressions before they become incidents.

Recurring monitoring
  • → Scheduled scans: daily, weekly, or monthly
  • → Regression alerts: notified only when something gets worse
  • → Scan history: revisit every past result
  • → Delta detection: see exactly what changed since last scan
Agent Config Tamper Detection
  • → Config file inventory: SHA256 hashes of SOUL.md, IDENTITY.md, AGENTS.md and other core files
  • → Drift detection: alerts when core config files change unexpectedly
  • → Prompt injection scan: detect zero-width characters, instruction overrides, and external script URLs in config files
Fleet & dashboard
  • → Posture trend at clawvitals.io/dashboard
  • → Fleet management: track multiple OpenClaw instances
  • → Named instances: alias each install for easy identification
Control & reporting
  • → Exclusion management: suppress findings that don't apply to your setup
  • → Export scan reports: share with your team or include in deployment workflows
openclaw plugins install clawhub:claw-security-vitals