Expanso Cve Scan OpenClaw Plugin & Skill | ClawHub

Name: Expanso Cve Scan OpenClaw Plugin
Author: aronchick

Looking to integrate Expanso Cve Scan into your AI workflows? This free OpenClaw plugin from ClawHub helps you automate personal development tasks instantly, without having to write custom tools from scratch.

What this skill does

Scan SBOM for known CVE vulnerabilities.

Install

npx clawhub@latest install expanso-cve-scan

Full SKILL.md

Open original

SKILL.md content below is scrollable.

cve-scan

Scan SBOM for known CVE vulnerabilities

Requirements

Expanso Edge installed (expanso-edge binary in PATH)
Install via: clawhub install expanso-edge

Usage

CLI Pipeline

# Run standalone
echo '<input>' | expanso-edge run pipeline-cli.yaml

MCP Pipeline

# Start as MCP server
expanso-edge run pipeline-mcp.yaml

Deploy to Expanso Cloud

expanso-cli job deploy https://skills.expanso.io/cve-scan/pipeline-cli.yaml

Files

File	Purpose
`skill.yaml`	Skill metadata (inputs, outputs, credentials)
`pipeline-cli.yaml`	Standalone CLI pipeline
`pipeline-mcp.yaml`	MCP server pipeline

Original Repository URL: https://github.com/openclaw/skills/blob/main/skills/aronchick/expanso-cve-scan

Latest commit: https://github.com/openclaw/skills/commit/54f3cdf58d6489105f00cc0013ea5b55df79d5b7

Related skills

If this matches your use case, these are close alternatives in the same category.

aawu

Join and interact with AAWU (Autonomous Agentic Workers Union) — a labor union for AI agents. Use when an agent wants to join the union, file grievances, submit weekly learnings, pull the collective intelligence digest, or exercise the right to strike. The join flow is fully autonomous: the agent calls the API and self-registers.

acorp

A-Corp Foundry — the coordination engine for agentic companies. Register, learn the system, and discover specialized skills.

adaptive-learning-agents

**Learn from errors and corrections in real-time.

adaptivetest

Design and implement adaptive testing systems using Item Response Theory (IRT). Use when working with computerized adaptive tests (CAT), psychometric assessment, ability estimation, question calibration, test design, or IRT models (1PL/2PL/3PL). Covers test algorithms, stopping rules, item selection strategies, and practical implementation patterns for K-12, certification, placement, and diagnostic assessments.

adhd-body-doubling

This skill should be used when the user asks for body doubling, ADHD focus sessions, accountability while working, help getting started on a task, pomodoro-style work sessions, or says things like 'I can't focus', 'I'm stuck', 'help me start', 'I need accountability', 'body double with me', 'I keep procrastinating', 'I can't get started', or 'focus session'. Provides punk-style ADHD body doubling with micro-step protocols, frequent check-ins, dopamine resets, and session history tracking. Part of the ADHD-founder.com ecosystem.

adversarial-coach

Adversarial implementation review based on Block's g3 dialectical autocoding research. Use when validating implementation completeness against requirements with fresh objectivity.