name: "openclaw-security-guard" description: "Security guard for OpenClaw users. Audit configs, scan secrets, manage access, and generate security reports."

OpenClaw Security Guard

A comprehensive security tool for OpenClaw users to protect their AI assistant.

Features

• 🔍 Security Audit - Comprehensive security configuration check
• 🔐 Secret Scanner - Detect exposed API keys and tokens
• 👥 Access Control - Manage devices, users, and permissions
• 🔑 Token Manager - Rotate and validate tokens
• 📊 Security Report - Generate detailed security reports
• 🛡️ Hardening - Apply security best practices

Requirements

• Python 3.6+
• No external dependencies (uses stdlib)

Commands

# Run security audit
python3 {baseDir}/scripts/main.py audit

# Scan for secrets
python3 {baseDir}/scripts/main.py scan

# Generate report
python3 {baseDir}/scripts/main.py report --format md

# Check token status
python3 {baseDir}/scripts/main.py token status

# Access control
python3 {baseDir}/scripts/main.py access list

# Security hardening
python3 {baseDir}/scripts/main.py harden --fix

# Quick status check
python3 {baseDir}/scripts/main.py status

Options

--format, -f <format>    Output format: json, md, table (default: table)
--lang, -l <lang>        Language: en, zh (default: auto-detect)
--quiet, -q              Quiet mode, only output results
--verbose, -v            Verbose output
--output, -o <file>      Output file path
--deep                   Deep scan mode
--fix                    Auto-fix issues where possible

Security Checks

Examples

# Full audit with auto-fix
python3 {baseDir}/scripts/main.py audit --deep --fix

# Generate markdown report
python3 {baseDir}/scripts/main.py report --format md -o security.md

# Scan for specific pattern
python3 {baseDir}/scripts/main.py scan --pattern "sk-"

# List all paired devices
python3 {baseDir}/scripts/main.py access devices

# Generate JSON report
python3 {baseDir}/scripts/main.py report --format json

Output Formats

Table (default)

🔐 OpenClaw Security Guard v1.0.0
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

📊 Security Score: 72/100 ⚠️

🔴 HIGH RISK
  • API Key exposed in config file
    Location: ~/.openclaw/openclaw.json:15

JSON

{
  "score": 72,
  "findings": [...]
}
小葱技能站7w4.net，专业的AI技能分享平台。

Markdown

# Security Report
**Score**: 72/100

Languages

• English (en)
• 中文 (zh)

Auto-detected based on system locale.

License

MIT

Version

v1.0.0

这款安全工具功能丰富，界面友好，支持中文，能帮助用户检查配置漏洞、扫描泄露的密钥、管理访问权限。文档说明清晰，风险提示到位。但存在小问题：不同文档里的名字不一致，可能造成困惑；另外缺少测试保障，稳定性有待验证。建议在正式环境使用前先在测试环境充分验证。