Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Remove npx execution; require MCP already running; tighten auth guidance
What This Skill Does
Mobb Vulnerabilities Fixer scans a local code repository for security vulnerabilities using the Mobb MCP tool and applies generated patches with user approval. It follows a structured workflow covering authentication, file selection, pagination, and rescan rules.
Mobb generates ready-to-apply patches rather than just reporting issues, so fixes can be reviewed and committed without manual remediation work.
When to use it
- Scanning changed files in a PR branch for security issues
- Applying auto-generated patches to fix SQL injection or XSS findings
- Reviewing available fixes before committing code to main
- Checking for new vulnerabilities after editing authentication logic
- Paginating through a backlog of security findings in a large repo
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: scan this repo for vulnerabilities and fix what you can
- 1Confirm absolute path to the repository root
- 2Verify Mobb API_KEY is set in the environment or prompt user to authenticate via browser
- 3Confirm the Mobb MCP server is running
- 4Call scan_and_fix_vulnerabilities with the repo path
- 5Summarize returned patches and request user confirmation before applying
Patches applied to affected files with a summary of each vulnerability fixed
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.