← Back to Plugins
Tools

Frisk

lowwattlabs By lowwattlabs 👁 31 views ▲ 0 votes

Frisk — OpenClaw security audit plugin. 9 threat intel sources, 7 checks.

GitHub

Install

openclaw plugins install clawhub:@lowwattlabs/frisk-audit

Configuration Example

{
  "frisk": {
    "binaryPath": "/usr/local/bin/frisk",
    "allowExternal": true
  }
}

README

# Frisk — OpenClaw Plugin

Pre-install security audit and vulnerability scanner for ClawHub skills.

## Install

```bash
npm i -g @lowwattlabs/frisk
openclaw plugins install clawhub:@lowwattlabs/frisk-audit
```

## Tools

- **frisk** — Run security audit on a ClawHub skill slug or local path

## Requirements

- Frisk CLI binary (`frisk`) — install via npm or download from [GitHub Releases](https://github.com/lowwattlabs/frisk/releases)
- Default binary path: `/usr/local/bin/frisk`

## Configuration

```json
{
  "frisk": {
    "binaryPath": "/usr/local/bin/frisk",
    "allowExternal": true
  }
}
```

- `binaryPath`: Absolute path to the frisk binary. Defaults to `/usr/local/bin/frisk` (not PATH-resolved).
- `allowExternal`: Allow network operations (threat intel sync, remote repo cloning). Default: `false`.

## Network Disclosures

- `frisk sync` connects to external threat intel feeds (CISA KEV, Feodo, EPSS, etc.). Blocked unless `allowExternal: true`.
- `frisk --slug <slug>` clones public Git repositories. Blocked unless `allowExternal: true`.
- Binary is resolved from absolute path to prevent PATH hijacking.

## Links

- **GitHub**: https://github.com/lowwattlabs/frisk
- **npm**: https://www.npmjs.com/package/@lowwattlabs/frisk
- **ClawHub**: https://clawhub.ai/lowwattlabs/frisk-audit

## License

MIT-0
tools

Comments

Sign in to leave a comment

Loading comments...