name: openclaw-security-guard description: Security audit CLI + live dashboard for OpenClaw. Scans for secrets, config issues, prompt injections, vulnerable dependencies, and unverified MCP servers. Zero telemetry. version: 1.0.0 metadata: openclaw: requires: bins: - node install: - kind: node package: openclaw-security-guard bins: [openclaw-guard, openclaw-security-guard] emoji: "\U0001F6E1" homepage: https://github.com/2pidata/openclaw-security-guard os: - macos - linux - windows

OpenClaw Security Guard

The missing security layer for your OpenClaw installation.

What it does

Run openclaw-guard audit to scan your OpenClaw setup across 5 categories:

• Secrets Scanner -- Detects API keys, tokens, passwords across 15+ formats + entropy analysis
• Config Auditor -- Checks sandbox mode, DM policy, gateway binding, rate limiting
• Prompt Injection Detector -- 50+ patterns: instruction overrides, role hijacking, jailbreaks
• Dependency Scanner -- npm CVE scanning
• MCP Server Auditor -- Allowlist-based verification of installed MCP servers

Quick start

npm install -g openclaw-security-guard

# Full audit
openclaw-guard audit

# Fix issues automatically (with backup)
openclaw-guard fix --auto

# Launch live dashboard
openclaw-guard dashboard

Features

• Security Score (0-100) -- one number for your security posture
• Auto-hardening -- interactive, automatic, or dry-run modes
• Live dashboard -- real-time monitoring at localhost:18790
• Pre-commit hooks -- catch secrets before they're committed
• Multi-language -- English, French, Arabic
• Zero telemetry -- no tracking, no network requests, 100% local

Links

• Repository: https://github.com/2pidata/openclaw-security-guard
• Author: Miloud Belarebia / 2PiData
• License: MIT

这是一款功能全面的 OpenClaw 安全工具，质量较好。它能扫描密码泄露、配置漏洞、提示词注入等常见安全问题，并提供自动修复建议和可视化仪表板。界面友好，支持多语言，声称不收集任何数据。优点是功能丰富、文档详细、使用简单；不足是部分高级功能（如依赖漏洞扫描）的深度可能不够，界面仪表板的实际监控能力需要验证。适合重视 AI 应用安全的用户尝试。